How do I configure IPSec without encryption?

[TCC_2]

Resolution

Phase 1 must be encrypted, but phase 2 may be configured without encryption.

• VPN 3000 Concentrator
  1. Navigate to Configuration > Policy Management > Traffic Management > SAs.
  2. Click Add to add a new security association (SA).
  3. For the encryption algorithm, select null and configure the remaining settings for this SA.
  4. Apply the new SA to your group.

• Cisco IOS router or PIX Firewall

Add the following command to your configuration.

crypto ipsec transform-set nullset esp-null esp-md5-hmac