Filter
Top Products
34-18
Cisco ASDM User Guide
OL-16647-01
Chapter 34 IKE
IPsec
IPsec Transform Sets
Use this panel to view and add or edit transform sets. A transform is a set of operations done on a data
flow to provide data authentication, data confidentiality, and data compression. For example, one
transform is the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Fields
• Transform Sets—Shows the configured transform sets.
–
Name—Shows the name of the transform sets.
–
Mode—Shows the mode, Tunnel, of the transform set. This parameter specifies the mode for
applying ESP encryption and authentication; in other words, what part of the original IP packet
has ESP applied. Tunnel mode applies ESP encryption and authentication to the entire original
IP packet (IP header and data), thus hiding the ultimate source and destination addresses.
–
ESP Encryption—Shows the Encapsulating Security Protocol (ESP) encryption algorithms for
the transform sets. ESP provides data privacy services, optional data authentication, and
anti-replay services. ESP encapsulates the data being protected.
–
ESP Authentication—Shows the ESP authentication algorithms for the transform sets.
• Add—Opens the Add Transform Set dialog box, in which you can add a new transform set.
• Edit—Opens the Edit Transform Set dialog box, in which you can modify an existing transform set.
• Delete—Removes the selected transform set. There is no confirmation or undo.
Modes
The following table shows the modes in which this feature is available:
Add/Edit Transform Set
Use this panel to add or modify a transform set. A transform is a set of operations done on a data flow
to provide data authentication, data confidentiality, and data compression. For example, one transform
is the ESP protocol with 3DES encryption and the HMAC-MD5 authentication algorithm
(ESP-3DES-MD5).
Fields
• Set Name—Specifies a name for this transform set.
• Properties—Configures properties for this transform set. These properties appear in the Transform
Sets table.
–
Mode—Shows the mode, Tunnel, of the transform set. This field shows the mode for applying
ESP encryption and authentication; in other words, what part of the original IP packet has ESP
applied. Tunnel mode applies ESP encryption and authentication to the entire original IP packet
(IP header and data), thus hiding the ultimate source and destination addresses.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——