Siemens SCALANCE S615 - Page 393

Security and authentication
9.3 IPsec VPN
SCALANCE S615 Command Line Interface
Configuration Manual, 06/2015, C79000-G8976-C406-02
393
Requirement
● The default list is not used.
● You are in the IPSEC PHASE configuration mode.
The command prompt is as follows:
cli(config-conn-phs1)#
Syntax
Call up the command with the following parameters:
ike-encryption
{3des|aes128cbc|aes192cbc|aes256cbc|aes128ctr|aes192ctr|aes256ctr|aes128ccm16|aes192c
cm16|aes256ccm16|aes128gcm16|aes192gcm16|aes256gcm16}
The parameters have the following meaning:
Parameter
Description
Phase 1
IKEv1
IKEv2
3des
Triple Data Encryption Standard
x
x
aes128cbc
Advanced Encryption Standard with 128 bits
x
x
aes192cbc
Advanced Encryption Standard with 192 bits x x
aes256cbc
Advanced Encryption Standard with 256 bits
x
x
aes128ctr
Advanced Encryption Standard with 128 bits in Counter
mode
- x
aes192ctr
Advanced Encryption Standard with 192 bits in Counter
mode
- x
aes256ctr
Advanced Encryption Standard with 256 bits in Counter
mode
- x
aes128ccm16
Advanced Encryption Standard with 128 bits in Counter
mode using a 16 byte Integrity Check Value (ICV)
- x
aes192ccm16
Advanced Encryption Standard with 192 bits in Counter
mode using a 16 byte Integrity Check Value (ICV)
- x
aes256ccm16
Advanced Encryption Standard with 256 bits in Counter
mode using a 16 byte Integrity Check Value (ICV)
- x
aes128gcm16
Advanced Encryption Standard with 128 bits in Galois Coun-
ter mode using a 16 byte Integrity Check Value (ICV)
- x
aes192gcm16
Advanced Encryption Standard with 192 bits in Galois Coun-
ter mode using a 16 byte Integrity Check Value (ICV)
- x
aes256gcm16
Advanced Encryption Standard with 256 bits in Galois Coun-
ter mode using a 16 byte Integrity Check Value (ICV)
- x
x: is supported
-: is not supported
Result
The encryption algorithm is configured.