Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
428
Views
0
Helpful
2
Replies

transform sets

aksher
Level 1
Level 1

‎12-16-2007 10:11 PM - edited ‎03-09-2019 07:39 PM

When nine transform sets to the max are used in crypto map do they go in sequential order like 1st, 2nd ? and what is difference in having multiple trasnform sets?

Labels:
0 Helpful
2 Replies 2

husycisco
Level 7
Level 7

‎12-17-2007 02:42 AM

Hi Aksher

Sequence is not a concern actually. This is about having more than 1 peers that have different transform sets. Which means you may have one peer with ESP-3DES-MD5 other is ESP-3DES-HMAC and another with ESP-DES-MD5 and so on. The tunnel you desire will use the transform set you set with with following command, (it wont seek all availale transform sets in a sequential order)

crypto map outside_map xxx set transform-set yyyyyy

But isakmp policies can not be set tunnel specific as above. In this case, all available isakmp policies will be seeked and matched one will be chosen. But again, sequence is not a matter since seek process checks every existing isakmp policy

Regards

0 Helpful

husycisco
Level 7
Level 7
In response to husycisco

‎12-17-2007 05:53 AM

Aksher,

It looks like you have asked many questions but havent rated posts yet. Please click on "How NetPro Ratings work" at left below the "Meet the Netpros" box and read "Why should I rate"

Rating does not cost any fee

Regards

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents