Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

How do I configure IPSec without encryption?

Resolution

Phase 1 must be encrypted, but phase 2 may be configured without encryption.

  • VPN 3000 Concentrator

    1. Navigate to Configuration > Policy Management > Traffic Management > SAs.
    2. Click Add to add a new security association (SA).
    3. For the encryption algorithm, select null and configure the remaining settings for this SA.
    4. Apply the new SA to your group.

  • Cisco IOS router or PIX Firewall

Add the following command to your configuration.

crypto ipsec transform-set nullset esp-null esp-md5-hmac

2693
Views
0
Helpful
0
Comments