Filter
Top Products
Crypto Show Commands
XSR CLI Reference Guide 14-119
show crypto ipsec transform-set
Thiscommanddisplaysconfiguredtransform‐sets.IPSectransform‐setscreatedwithEZ‐IPSec
configurationaremarkedwithanasterisk(*)inthe
showoutput.Theseproposalsmaynotbeused
inotheruser‐definedIPSecpolicies.TheyarereservedforEZ‐IPSec
Syntax
show crypto ipsec transform-set [transform-set-name]
Mode
EXECorGlobalconfiguration:XSR> or XSR(config)#
Sample Output
Thefollowingexamplewasproducedfrommanuallyconfiguredtransform‐sets:
XSR#show crypto ipsec transform-set
Name
PFS ESP ESP-AH AH IPCOMP
esp-3des-md5 Disabled AES HMAC-MD5 None None
ah-sha Disabled None None HMAC-SHA None
ThefollowingoutputwasproducedbyEZ‐IPSectransform‐sets:
XSR#show crypto ipsec transform-set
Name PFS ESP ESP-AH AH IPCOMP
*ez-esp-3des-sha-pfs Modp768 3DES HMAC-SHA None None
*ez-esp-3des-sha-no-pfs Disabled 3DES HMAC-SHA None None
*ez-esp-3des-md5-pfs Modp768 3DES HMAC-MD5 None None
*ez-esp-3des-md5-no-pfs Disabled 3DES HMAC-MD5 None None
*ez-esp-aes-sha-pfs Modp768 AES HMAC-SHA None None
*ez-esp-aes-sha-no-pfs Disabled AES HMAC-SHA None None
*ez-esp-aes-md5-pfs Modp768 AES HMAC-MD5 None None
*ez-esp-aes-md5-no-pfs Disabled AES HMAC-MD5 None None
ESP TypeofSA:eitherESPorAH.
SPI=40d5e065 UniqueSecurityParameterIndex(SPI)numberfortheSA.
Transform Encryptionalgorithmset.
Life=3589s/24993 2KB LifetimeoftheSAinsecondsandKBytes.
Localcryptoendpt.‐10.2.1.34:4500 IPaddressandportnumberofthelocalcryptopeer.
Remotecryptoendpt.‐10.2.1.34:4500 IPaddressandportnumberofthe
remotecryptopeer.
Encapsulation ESPorAHEncodingMode.
UDP‐Encaps IndicatesNATispresentbetweenthecryptoendpoints.
transform-set-name
Showstransform‐setswiththespecifictransform‐set‐nameonly.