TechLibrary

Navigation Back up to About Overview

ContentIndex

[+] Expand All

[-] Collapse All

Junos OS Release 12.3X48 Feature Guide
- New Features in Junos OS Release 12.3X48-D30
  - Integrated ClearPass Authentication and Enforcement
    - Understanding SRX Series Integrated ClearPass Authentication and Its Component Functions
      - Understanding the SRX Series Integrated ClearPass Authentication and Enforcement Feature
        Why You Need to Protect Your Environment With the SRX Series Integrated ClearPass Authentication and Enforcement Feature
        How the SRX Series Integrated ClearPass Authentication and Enforcement Feature Can Protect Your Network Environment
      - SRX Series Supported Platforms for the Integrated ClearPass Authentication and Enforcement Feature
      - Understanding How ClearPass Initiates a Session and Communicates User Authentication Information to the SRX Series Device Using the Web API
        Web API
        ClearPass Authentication Table
        Using HTTPS or HTTP for the Connection Protocol Between ClearPass and the SRX Series Device
        Ensuring the Integrity of Data Sent from ClearPass to the SRX Series Device
        Data Size Restrictions and Other Constraints
        Posture States and the Posture Group
      - Understanding Enforcement of ClearPass User and Group Authentication on the SRX Series Devices
        Understanding How the SRX Series Device Manages the ClearPass Authentication Table
        User Authentication Entries in the ClearPass Authentication Table
        Communication Between ClearPass and the SRX Series Device
        Understanding Domains and Interested Groups
        When a User Has Already Been Authenticated By Another Source
      - Understanding the Integrated ClearPass Authentication and Enforcement User Query Function
      - Understanding How the Integrated ClearPass Feature Detects Threats and Attacks and Notifies the CPPM
      - SRX Series Threat and Attack Logs Sent to Aruba ClearPass
    - Integrated ClearPass Authentication and Enforcement Examples
    - Integrated ClearPass Authentication and Enforcement CLI Configuration Statements
    - Integrated ClearPass Authentication and Enforcement CLI Operational Commands
- New Features in Junos OS Release 12.3X48-D20
- New Features in Junos OS Release 12.3X48-D15
- Requesting Technical Support
- Revision History

No index entries found.

Download This Guide

Download this guide: Junos OS Release 12.3X48 Feature Guide

encryption-algorithm (Security IKE)

Syntax

Hierarchy Level

[edit security group-vpn member ike proposal proposal-name][edit security group-vpn server ike proposal proposal-name][edit security ike proposal proposal-name]

Release Information

Statement introduced in Junos OS Release 8.5. Support for group-vpn hierarchies added in Junos OS Release 10.2. Support for aes-128-gcm and aes-256-gcm options added in Junos OS Release 12.3X48-D20.

Description

Configure an encryption algorithm for an IKE proposal.

Note: The device does not delete existing IPsec SAs when you update the encryption-algorithm configuration in the IKE proposal.

Options

3des-cbc

—

Has a block size of 24 bytes; the key size is 192 bits long.

aes-128-cbc

—

Advanced Encryption Standard (AES) 128-bit encryption algorithm.

aes-128-gcm

—

AES 128-bit authenticated encryption algorithm supported with IKEv2 only. When this option is used, aes-128-gcm must be configured at the [edit security ipsec proposal proposal-name] hierarchy level, and the authentication-algorithm option must not be configured at the [edit security ike proposal proposal-name] hierarchy level. This option is not supported on Group VPN.

aes-192-cbc

—

AES 192-bit encryption algorithm.

aes-256-cbc

—

AES 256-bit encryption algorithm.

aes-256-gcm

—

AES 256-bit authenticated encryption algorithm supported with IKEv2 only. When this option is used, aes-256-gcm must be configured at the [edit security ipsec proposal proposal-name] hierarchy level, and the authentication-algorithm option must not be configured at the [edit security ike proposal proposal-name] hierarchy level. This option is not supported on Group VPN.

des-cbc

—

Has a block size of 8 bytes; the key size is 48 bits long.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.