Configuring Transform Sets for an IPsec Transport Profile

You can use the transform-set command to specify the transform sets that an IPsec transport connection can use to negotiate a transform algorithm. Each transform in a transform set provides a different combination of data authentication and confidentiality.

You can use the transform-set ? command to display the available transform sets.

To specify the transform set:

host1(config-ipsec-transport-profile)#transform-set esp-3des-hmac-sha

Use the no version to reset the transform set to the default, esp-3des-hmac-sha.

Related Documentation