topic 515e VPN encryption in Network Security

515e VPN encryption

johnnymac — Mon, 11 Mar 2019 09:08:04 GMT

Hi,

Can anyone tell me how i could change the encryption that our client to site uses from des/md5 to 3des/sha and if there is a common standard for what is considered to most secure.

Thanks

J Mack

Re: 515e VPN encryption

zulqurnain — Tue, 12 Dec 2006 15:49:56 GMT

as what i understood from your question you pix should have as following

--:Defines IPSec encryption and authentication algorithms

crypto ipsec transform-set yourname esp-3des esp-sha-hmac

--: Defines crypto map.

crypto map transam 1 set transform-set yourname

--: Defines ISAKMP policy.

isakmp policy 10 encryption 3des

isakmp policy 10 hash sha

if help full please rate it

Re: 515e VPN encryption

johnnymac — Tue, 12 Dec 2006 15:54:30 GMT

Hi Thanks,

I am running a l2l as well as a client to site, is it ok to have them on different encryption levels.

Re: 515e VPN encryption

zulqurnain — Tue, 12 Dec 2006 15:59:53 GMT

i am not so sure as i have never tested such configuration or never came across but as for the understanding i believe not.