Technical Documentation



encryption-algorithm algorithm;

Hierarchy Level

[edit services ipsec-vpn ike proposal proposal-name],[edit services ipsec-vpn ipsec proposal proposal-name]

Release Information

Statement introduced before JUNOS Release 7.4.

aes-128-cbc, aes-192-cbc, and aes-256-cbc options added in JUNOS Release 7.6.


Configure an IKE or IPsec encryption algorithm.


3des-cbc—Has a block size of 24 bytes; the key size is 192 bits long.

des-cbc—Has a block size of 8 bytes; the key size is 48 bits long.

aes-128-cbc—Advanced Encryption Standard (AES) 128-bit encryption algorithm.

aes-192-cbc—Advanced Encryption Standard (AES) 192-bit encryption algorithm.

aes-256-cbc—Advanced Encryption Standard (AES) 256-bit encryption algorithm.

Usage Guidelines

See Configuring the Encryption Algorithm for an IKE Proposal and Configuring the Encryption Algorithm for an IPsec Proposal.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration.

Published: 2010-04-28