Cisco ROUTER-SDM-CD User Guide - Page 411

Chapter 17 IP Security IPSec Policies Add or Edit Crypto Map: Transform Sets Use this window to add and edit the transform set used in the crypto map. A crypto map includes the hostnames or IP addresses of the peers involved in the security association. Multiple peers provide the router with multiple routes for encrypted data. However, the devices at both ends of the VPN connection must use the same transform set. Use the Crypto Map Wizard if it is sufficient for your router to offer a crypto map with one transform set. Use Add New Crypto Map... with Use Add Wizard unchecked if you want to manually configure a crypto map with multiple transforms sets (up to six) to ensure that the router can offer one transform set that the peer it is negotiating with will accept. If you are already in the Crypto Map Wizard, exit the wizard, uncheck Use Add Wizard, and click Add New Crypto Map.... If you manually configure a crypto map with multiple transforms sets, you can also order the transform sets. This will be the order that the router will use to negotiate which transform set to use. Available Transform Sets Configured transform sets available for use in crypto maps. In the Crypto Map Wizard, the available transform sets are in the Select Transform Set drop-down list. If no transform sets have been configured on the router, only the default transform sets provided with Cisco SDM are shown. Note • Not all routers support all transform sets (encryption types). Unsupported transform sets will not appear in the window. • Not all IOS images support all the transform sets that Cisco SDM supports. Transform sets unsupported by the IOS image will not appear in the window. • If hardware encryption is turned on, only those transform sets supported by both hardware encryption and the IOS image will appear in the window. OL-4015-12 Cisco Router and Security Device Manager 2.5 User's Guide 17-7