Reference Guide

174 | crypto ipsec Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide
crypto ipsec
crypto ipsec {mtu <max-mtu>}|{transform-set <transform-set-mtu> esp-3des|esp-
aes128|esp-aes192|esp-aes256|esp-des esp-md5-hmac|esp-sha-hmac}
Description
This command configures IPsec parameters.
Syntax
Usage Guidelines
Define the Maximum Transmission Unit (MTU) size allowed for network transmissions using IPsec security, and
create or edit transform sets that define a specific encryption and authentication type.
Example
The following command configures 3DES encryption and MD5 authentication for a transform set named set1:
Command History
This command was introduced in ArubaOS 3.0.
Command Information
Parameter Description Range Default
mtu Configure IPsec Maximum Transmission Unit (MTU)
parameters.
——
<max-mtu> Configure IPsec MTU. 1024-1500 1500
transform-set Create or modify a transform set. — —
<transform-set-mtu> Name of the transform set to create or modify. — —
esp-3des Use ESP with 168-bit 3DES encryption. — —
esp-aes128 Use ESP with 128-bit AES encryption. — —
esp-aes192 Use ESP with 192-bit AES encryption. — —
esp-aes256 Use ESP with 256-bit AES encryption. — —
esp-des Use ESP with 56-bit DES encryption. — —
esp-md5-hmac Use ESP with the MD5 (HMAC variant) authentication
algorithm
esp-sha-hmac Use ESP with the SHA (HMAC variant) authentication
algorithm
Platforms Licensing Command Mode
All platforms Base operating system Config mode on master controllers
(host) (config)# crypto ipsec transform-set set1 esp-3des esp-md5-hmac