HPE Community
Comware Based
1829542 Members
2297 Online
109992 Solutions
New Discussion

Transform Set CM7 with Cisco not Matching

 
davidgrocke
Occasional Contributor

‎02-08-2018 02:06 AM - edited ‎02-08-2018 02:07 AM

‎02-08-2018 02:06 AM - edited ‎02-08-2018 02:07 AM

Transform Set CM7 with Cisco not Matching

Working Configration, Phase 1 and 2 complete

Cisco CSR1K 

crypto ipsec transform-set grocke ah-sha-hmac

 Comware VSR1K 

ipsec transform-set grocke
esp encryption-algorithm 3des-cbc

 

Not working

Cisco CSR1K 

crypto ipsec transform-set grocke ah-sha-hmac

 Comware VSR1K 

ipsec transform-set grocke
ah authentication-algorithm sha1

Phase 1 is working, but this transform set isnt matching... looking at "show ipsec transform-set" it shows Transform: ESP.

  

Oh, I'm an idiot. Before I finished posting I found the answer. I can set the protocol to AH rather than ESP.

ipsec transform-set grocke
 protocol ah
 ah authentication-algorithm sha1

Well, hopefully that comes in handy for someone in the future. Thanks Everyone!!!

 

0 Kudos
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.