IPsec Encryption Levels
The encryption level denes a set of IKE and IPsec SA algorithms.
Below a complete list of algorithms is displayed for each level in order of decreasing
priority, as well as a set of commands crypto ike proposal to setup this prole manually.
In the list of algorithms is indicated:
• encryption with key length
• hash function for HMAC forming
• PFS mode (NO if disabled)
D.1 weak
AES128-SHA1-MODP1024IKE
AES128-SHA1-MODP768
AES128-MD5-MODP1024
AES128-MD5-MODP768
3DES-SHA1-MODP1024
3DES-SHA1-MODP768
3DES-MD5-MODP1024
3DES-MD5-MODP768
DES-SHA1-MODP1024
DES-SHA1-MODP768
DES-MD5-MODP1024
DES-MD5-MODP768
DES-MD5-NOIPsec SA
AES128-SHA1-NO
3DES-SHA1-NO
DES-SHA1-NO
AES128-MD5-NO
D
Keenetic Lite (KN-1310) — Command Reference Guide
315