Concept Guide

crypto ipsec
crypto ipsec
mtu <max-mtu>
transform-set <transform-set-mtu> esp-3des|esp-aes128|esp-aes128-gcm|esp-aes192|esp-
aes256|esp-aes256-gcm|esp-des esp-md5-hmac|esp-null-hmac|esp-sha-hmac}
Description
This command configures IPsec parameters.
Syntax
Parameter Description
mtu <max-mtu>
Configure the IPsec Maximum Transmission Unit (MTU) size.
The supported range is 1024 to 1500 and the default is 1500.
transform-set <transform-set-mtu>
Create or modify a transform set.
esp-3des
Use ESP with 168-bit 3DES encryption.
esp-aes128
Use ESP with 128-bit AES encryption.
esp-aes128-gcm
Use ESP with 128-bit AES-GCM encryption.
esp-aes192
Use ESP with 192-bit AES encryption.
esp-aes256
Use ESP with 256-bit AES encryption.
esp-aes256-gcm
Use ESP with 256-bit AES-GCM encryption.
esp-des
Use ESP with 56-bit DES encryption.
esp-md5-hmac
Use ESP with the MD5 (HMAC variant) authentication
algorithm
esp-null-hmac
Use ESP with no authentication. This option is not
recommended.
esp-sha-hmac
Use ESP with the SHA (HMAC variant) authentication
algorithm.
Usage Guidelines
Define the Maximum Transmission Unit (MTU) size allowed for network transmissions using IPsec security, and
create or edit transform sets that define a specific encryption and authentication type.
Example
The following command configures 3DES encryption and MD5 authentication for a transform set named set2:
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide crypto ipsec | 303