encryption

Syntax

Hierarchy Level

Description

Configure an encryption algorithm and key for manual SA.

Options

algorithm—Type of encryption algorithm. The algorithm can be one of the following:

• des-cbc—Has a block size of 8 bytes (64 bits); the key size is 48 bits long.

• 3des-cbc—Has a block size of 8 bytes (64 bits); the key size is 192 bits long.

• aes-128-cbc—Advanced Encryption Standard (AES) 128-bit encryption algorithm.

• aes-192-cbc—Advanced Encryption Standard (AES) 192-bit encryption algorithm.

• aes-256-cbc—Advanced Encryption Standard (AES) 256-bit encryption algorithm.

  Note:

  For 3des-cbc, the first 8 bytes should differ from the second 8 bytes, and the second 8 bytes should be the same as the third 8 bytes.

key—Type of encryption key. The key can be one of the following:

• ascii-text—ASCII text key. Following are the key lengths, in ASCII characters, for the different encryption options:

  • des-cbc option, 8 ASCII characters

  • 3des-cbc option, 24 ASCII characters

  • aes-128-cbc option, 16 ASCII characters

  • aes-192-cbc option, 24 ASCII characters

  • aes-256-cbc option, 32 ASCII characters

• hexadecimal—Hexadecimal key. Following are the key lengths, in hexadecimal characters, for the different encryption options:

  • des-cbc option, 16 hexadecimal characters

  • 3des-cbc option, 48 hexadecimal characters

  • aes-128-cbc option, 32 hexadecimal characters

  • aes-192-cbc option, 48 hexadecimal characters

  • aes-256-cbc option, 64 hexadecimal characters

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

aes-128-cbc, aes-192-cbc, and aes-256-cbc options added in Junos OS Release 7.6.