crypto isakmp policy question

[ColForbin]

This calculator is the reason for this question:

https://ipsec-overhead-calculator.netsec.us/

If you have two cisco routers with a site to site tunnel using the following policy:

crypto isakmp policy 1

encryption aes256

hash sha512

group 16

authentication pre-share

crypto isakmp key Pass123 address 1.1.1.1

crypto ipsec transform-set T1 esp-aes esp-sha-hmac

mode tunnel

crypto ipsec profile P1

set transform-set T1

What part matches which field in the calculator?  Specifically the AH, ESP - Encryption, ESP - Integrity fields....thanks!

[Rob Ingram · Accepted solution]

@ColForbin the calculator is referring to the IPSec SA (transform set). Where you define ESP or AH (unlikely that is used) and the mode tunnel or transport.

crypto ipsec transform-set T1 esp-aes esp-sha-hmac
 mode tunnel

[ColForbin]

Thanks a bunch!