129
In FIPS mode:
esp encryption-algorithm { aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | aes-ctr-128 | aes-ctr-192
| aes-ctr-256 | gmac-128 | gmac-192 | gmac-256 | gcm-128 | gcm-192 | gcm-256 }*
undo esp encryption-algorithm
Views
IPsec transform set view
Change description
The following keywords were added:
aes-ctr-128: Uses the AES algorithm with a 128-bit key in CTR mode. This keyword is available
only for IKEv2.
aes-ctr-192: Uses the AES algorithm with a 192-bit key in CTR mode. This keyword is available
only for IKEv2.
aes-ctr-256: Uses the AES algorithm with a 256-bit key in CTR mode. This keyword is available
only for IKEv2.
camellia-cbc-128: Uses the Camellia algorithm with a 128-bit key in CBC mode. This keyword
is available only for IKEv2.
camellia-cbc-192: Uses the Camellia algorithm with a 192-bit key in CBC mode. This keyword
is available only for IKEv2.
camellia-cbc-256: Uses the Camellia algorithm with a 256-bit key in CBC mode. This keyword
is available only for IKEv2.
gmac-128: Uses the GMAC algorithm with a 128-bit key. This keyword is available only for
IKEv2.
gmac-192: Uses the GMAC algorithm with a 192-bit key. This keyword is available only for
IKEv2.
gmac-256: Uses the GMAC algorithm with a 256-bit key. This keyword is available only for
IKEv2.
gcm-128: Uses the GCM algorithm with a 128-bit key. This keyword is available only for IKEv2.
gcm-192: Uses the GCM algorithm with a 192-bit key. This keyword is available only for IKEv2.
gcm-256: Uses the GCM algorithm with a 256-bit key. This keyword is available only for IKEv2.
Modified command: pfs
Old syntax
In non-FIPS mode:
pfs { dh-group1 | dh-group2 | dh-group5 | dh-group14 | dh-group24 }
undo pfs
In FIPS mode: