CLI Guide
To delete a transform set, use the no crypto ipsec transform-set name 
{ah-authentication {md5|sha1|null} | esp-authentication {md5|
sha1|null} | esp-encryption {3des|cbc|des|null}} command.
Parameters
name Enter the name for the transform set.
ah-authentication Enter the keywords ah-authentication then the 
transform type of operation to apply to traffic. The 
transform type represents the encryption or authentication 
applied to traffic.
• md5 — Use Message Digest 5 (MD5) authentication.
• sha1 — Use Secure Hash Algorithm 1 (SHA-1) 
authentication.
• null — Causes an encryption policy configured for the 
area to not be inherited on the interface.
esp-
authentication
Enter the keywords esp-authentication then the 
transform type of operation to apply to traffic. The 
transform type represents the encryption or authentication 
applied to traffic.
• md5 — Use Message Digest 5 (MD5) authentication.
• sha1 — Use Secure Hash Algorithm 1 (SHA-1) 
authentication.
• null — Causes an encryption policy configured for the 
area to not be inherited on the interface.
esp-encryption Enter the keywords esp-encryption then the transform 
type of operation to apply to traffic. The transform type 
represents the encryption or authentication applied to 
traffic.
• 3des — Use 3DES encryption.
• cbc — Use CDC encryption.
• des — Use DES encryption.
• null — Causes an encryption policy configured for the 
area to not be inherited on the interface.
Defaults none
Command Modes CONFIGURATION
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Internet Protocol Security (IPSec)
739










