authentication-algorithm (Security IPsec)

Syntax

authentication-algorithm (hmac-md5-96 | hmac-sha-256-128 | hmac-sha-256-96 | hmac-sha1-96);

Hierarchy Level

[edit security ipsec proposal proposal-name]

Release Information

Statement modified in Junos OS Release 8.5. Support for hmac-sha-256-128 added to high-end SRX Series devices in Junos OS Release 12.1X46-D20.

Description

Configure the IPsec authentication algorithm.

Options

The hash algorithm to authenticate data can be one of the following:

hmac-md5-96

Produce a 128-bit digest.

hmac-sha-256-128

Produce a 256-bit digest, truncated to 128 bits. This option is not supported on group VPNs.

hmac-sha-256-96

Produce a 256-bit digest, truncated to 96 bits. This option is not supported on group VPNs or high-end SRX Series devices.

hmac-sha1-96

Produce a 160-bit digest.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Related Documentation