R2511-HP MSR Router Series Security Command Reference(V5)

195
Default command level
1: Monitor level
Parameters
transform-set-name: Specifies the name of an IPsec transform set, a string of 1 to 32 characters. If you do
not specify an IPsec transform set, the command displays information about all IPsec transform sets.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
If you do not specify any parameters, the command displays information about all IPsec transform sets.
Examples
# Display information about all IPsec transform sets.
<Sysname> display ipsec transform-set
IPsec transform-set name: tran1
encapsulation mode: tunnel
transform: esp-new
ESP protocol:
Integrity: md5-hmac-96
Encryption: des
IPsec transform-set name: tran2
encapsulation mode: transport
transform: esp-new
ESP protocol:
Integrity: md5-hmac-96
Encryption: des
Table 25 Command output
Field Description
IPsec transform-set name Name of the IPsec transform set.
encapsulation mode Encapsulation mode used by the IPsec transform set, transport or tunnel.
transform
Security protocols used by the IPsec transform set: AH, ESP, or both. If both
protocols are configured, IPsec uses ESP before AH.
AH protocol Authentication algorithm used by AH.
ESP protocol Authentication algorithm and encryption algorithm used by ESP.
Related commands
ipsec transform-set