2150 CHAPTER 140: IPS EC CONFIGURATION COMMANDStransformSyntax transform { ah | ah-esp | esp }undo transformView IPSec proposal viewParameter ah: Uses the AH protocol.ah-esp: Uses ESP first and then AH.esp: Uses the ESP protocol.Description Use the transform command to specify the security protocol for an IPSecproposal.Use the undo transform command to restore the default.By default, the ESP protocol is used.Note that:■ If ESP is used, the default encryption and authentication algorithms are DESand MD5 respectively.■ If AH is used, the default authentication algorithm is MD5.■ If both AH and ESP are used, AH takes the authentication algorithm of MD5 bydefault, while ESP takes the encryption algorithm of DES and uses noauthentication algorithm by default.■ The IPSec proposals at the two ends of an IPSec tunnel must use the samesecurity protocol.Related command: ipsec proposal.Example # Configure IPSec proposal prop1 to use AH. system-view[Sysname] ipsec proposal prop1[Sysname-ipsec-proposal-prop1] transform ahtunnel localSyntax tunnel local ip-addressundo tunnel localView IPSec policy viewParameter ip-address: Local address for the IPSec tunnel.
