Symptom

IPsec transform-set of esp-gmac is considered an insecure weak crypto algorithm. It should not be allowed to be configured unless crypto compliance shield is disabled. Router(config)#crypto ipsec transform-set test-gmac esp-gmac %Warning: weaker transform is deprecated This transform-set should be blocked instead of being accepted with a warning.

Conditions

This is an issue when configuring an IPsec transform-set using the esp-gmac algorithm.

Workaround

Workaround is to configure the IPsec transform-set using a stronger algorithm.

Further Problem Description