Specifying IPSec Security Association Transforms

The transform command specifies the IPSec transforms that IPSec SA negotiations can use for this profile. The router accepts the first transform proposed by a client that matches one of the transforms specified by this command. During an IPSec SA exchange with a client, the router proposes all transforms specified by this command and one is accepted by the client.

Note: You can specify up to six transform algorithms for this profile.

For additional information about transforms and transform sets, see Configuring IPSec.

transform

• Use to specify the eligible transforms for this profile for IPSec security association negotiations.
• Example

  host1(config-ipsec-tunnel-profile)#transform ah-hmac-md5

• Use the no version to reset the transform to the default, esp-3des-sha1.
• See transform.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.