Dell W-Series 304 Instant 6.5.1.0-4.3.1.0 CLI Reference Guide - Page 301

Parameter kilobytes set transform-set version Description Lifetime for the SA in kilobytes. Range 1000 1000000000 Name of the transform set for this - dynamic map. You can specify up to four transform sets. You configure transform sets with the crypto ipsec transform-set command. Specify the version of IKE protocol - the controller uses to set up a security association (SA) in the IPsec protocol suite l v1:IKEv1 l v2: IKEv2 Default - defaulttransfor m v1 Usage Guidelines Dynamic maps enable IPsec SA negotiations from dynamically addressed IPsec peers. Once you have defined a dynamic map, you can optionally associate that map with the default global map using the command crypto map global-map. Example The following command configures a dynamic map: (host) (config)# crypto dynamic-map dmap1 100 set pfs group2 set security-association lifetime seconds 300 Command History Release ArubaOS 3.0 Modification Command introduced ArubaOS 6.1 The version parameter was introduced. The pfs parameter was modified to support the group19 and group20 PFS group values. ArubaOS 6.3 ArubaOS 6.4 The set security-association lifetime kilobytesand Diffie-Hellman set pfs group 14 parameters were added. The disable/enable parameters were introduced. 301| crypto dynamic-map Dell Networking W-Series ArubaOS 6.5.x | Reference Guide