Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


authentication-algorithm (Security IPsec)



Hierarchy Level

Release Information

Statement modified in Junos OS Release 8.5.

Support for hmac-sha-256-128 added to SRX5400, SRX5600, and SRX5800 devices in Junos OS Release 12.1X46-D20.

hmac-sha-512, and hmac-sha-384 options introduced in Junos OS Release 191.R1 on SRX5000 line of devices with SRX5K-SPC3 card.

Starting in Junos OS Release 19.3R1, SRX4100, SRX4200, SRX5400, SRX5600, SRX5800, and vSRX platforms support authentication algorithms (SHA1: hmac-sha1-96 and SHA2: hmac-sha-256-128) in Power-Mode IPsec mode to improve IPsec performance, along with the existing support in normal mode.


Configure the IPsec authentication algorithm.


The hash algorithm to authenticate data can be one of the following:

  • hmac-md5-96—Produces a 128-bit digest.

  • hmac-sha-256-128—Produces a 256-bit digest, truncated to 128 bits.

  • hmac-sha1-96—Produces a 160-bit digest.

  • hmac-sha-512—Produces a 512-bit digest.

  • hmac-sha-384—Produces a 384-bit digest.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Related Documentation