195
sha256: Specifies the HMAC-SHA256 algorithm, which uses a 256-bit key. This keyword is
available only for IKEv2.
sha384: Specifies the HMAC-SHA384 algorithm, which uses a 384-bit key. This keyword is
available only for IKEv2.
sha512: Specifies the HMAC-SHA512 algorithm, which uses a 512-bit key. This keyword is
available only for IKEv2.
Modified command: esp encryption-algorithm
Old syntax
Low encryption:
esp encryption-algorithm des-cbc
undo esp encryption-algorithm
High encryption (in non-FIPS mode):
esp encryption-algorithm { 3des-cbc | aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | des-cbc | null
| sm1-cbc-128 | sm1-cbc-192 | sm1-cbc-256 } *
undo esp encryption-algorithm
High encryption (in FIPS mode):
esp encryption-algorithm { aes-cbc-128 | aes-cbc-192 | aes-cbc-256 }*
undo esp encryption-algorithm
New syntax
Low encryption:
esp encryption-algorithm des-cbc
undo esp encryption-algorithm
High encryption (in non-FIPS mode):
esp encryption-algorithm { 3des-cbc | aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | aes-ctr-128 |
aes-ctr-192 | aes-ctr-256 | camellia-cbc-128 | camellia-cbc-192 | camellia-cbc-256 | des-cbc |
gmac-128 | gmac-192 | gmac-256 | gcm-128 | gcm-192 | gcm-256 | null | sm1-cbc-128 |
sm1-cbc-192 | sm1-cbc-256 | sm4-cbc } *
undo esp encryption-algorithm
High encryption (in FIPS mode):
esp encryption-algorithm { aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | aes-ctr-128 | aes-ctr-192
| aes-ctr-256 | gmac-128 | gmac-192 | gmac-256 | gcm-128 | gcm-192 | gcm-256 }*
undo esp encryption-algorithm