Step 4-2 Display the Configured Transform Sets

Step 4-2 Display the Configured Transform Sets

Use the show crypto ipsec transform-set command to view the transform sets configured on the device. The command syntax shows an optional parameter that allows limiting the output to only a single transform set.

Rtr1#show crypto ipsec transform-set [tag transform-set-name]

Any time the keyword tag is used in IOS commands, it can be interpreted as “named” or “labeled” and is followed by a name. If no keyword and name are used, all transform sets configured are displayed as in the following example:

Rtr1#show crypto ipsec transform-set
Transform set DES-ONLY: { esp-des  }
   will negotiate = { Tunnel,  },

Transform set MD5-DES: { esp-des esp-md5-hmac  }
   will negotiate = { Tunnel,  },

Transform set CPU-HOG: { ah-md5-hmac  }
   will negotiate = { Tunnel,  },
   { esp-des esp-md5-hmac  }
   will negotiate = { Tunnel,  },

Transform set AH-ONLY: { ah-sha-hmac  }
   will negotiate = { Tunnel,  },
Rtr1#