| 14.6 |  | Task 4 - Test and Verify VPN Configuration |
| 14.6.3 |  | Verify correct IPSec algorithm configuration |

| To view the configured transform sets, use the show crypto IPSec transform-set command. The transform set defined in the crypto map entry is used in the IPSec security association negotiation to protect the data flows specified by the access list in that crypto map entry. During the negotiation, the peers search for a transform set that is the same at both VPN endpoints. When such a transform set is found, it is selected and applied to the protected traffic as part of both peer IPSec security associations .

The output shown in Figure is a result of the show crypto IPSec transform-set command being used on a PIX with the transform sets shown in Figure .