authentication-algorithm (Security IPsec)
Statement modified in Junos OS Release 8.5.
Support for hmac-sha-256-128 added to SRX5400, SRX5600, and SRX5800 devices in Junos OS Release 12.1X46-D20.
hmac-sha-512, and hmac-sha-384 options introduced in Junos OS Release 191.R1 on SRX5000 line of devices with SRX5K-SPC3 card.
Starting in Junos OS Release 19.3R1, SRX4100, SRX4200, SRX5400, SRX5600, SRX5800, and vSRX platforms support authentication algorithms (SHA1: hmac-sha1-96 and SHA2: hmac-sha-256-128) in Power-Mode IPsec mode to improve IPsec performance, along with the existing support in normal mode.
Configure the IPsec authentication algorithm.
The hash algorithm to authenticate data can be one of the following:
hmac-md5-96—Produces a 128-bit digest.
hmac-sha-256-128—Produces a 256-bit digest, truncated to 128 bits.
hmac-sha1-96—Produces a 160-bit digest.
hmac-sha-512—Produces a 512-bit digest.
hmac-sha-384—Produces a 384-bit digest.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.