HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

Transform Set CM7 with Cisco not Matching

 
davidgrocke
Occasional Contributor

Transform Set CM7 with Cisco not Matching

Working Configration, Phase 1 and 2 complete

Cisco CSR1K 

crypto ipsec transform-set grocke ah-sha-hmac

 Comware VSR1K 

ipsec transform-set grocke
esp encryption-algorithm 3des-cbc

 

Not working

Cisco CSR1K 

crypto ipsec transform-set grocke ah-sha-hmac

 Comware VSR1K 

ipsec transform-set grocke
ah authentication-algorithm sha1

Phase 1 is working, but this transform set isnt matching... looking at "show ipsec transform-set" it shows Transform: ESP.

  

Oh, I'm an idiot. Before I finished posting I found the answer. I can set the protocol to AH rather than ESP.

ipsec transform-set grocke
 protocol ah
 ah authentication-algorithm sha1

Well, hopefully that comes in handy for someone in the future. Thanks Everyone!!!