Configure an Encryption Algorithm

To configure an IPSec encryption algorithm, include the encryption-algorithm statement at the [edit services ipsec-vpn ipsec proposal proposal-name] hierarchy level:

[edit services ipsec-vpn ipsec proposal proposal-name]

encryption-algorithm (3des-cbc | des-cbc); 

The encryption algorithm can be one of the following:

• 3des-cbc—Encryption algorithm that has a block size of 24 bytes; its key size is 192 bits long.
• des-cbc—Encryption algorithm that has a block size of 8 bytes; its key size is 48 bits long.
  

  NOTE: We recommend that you use the 3DES-CBC encryption algorithm.