Support for HMAC-SHA256?

[graham_costa]

Hi,

I'm trying to find if any of the various flavours Cisco router/firewall would be capable of establishing an IPsec session that used HMAC-SHA256 in the Authentication field of the ESP header? So far I've drawn a blank and can only find support for SHA-1 implementations.

Regards,

GRAHAM.

[carenas123]

I think PIX and ASA support HMAC-SHA with 256 bit key for ESP. Following link may help you

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a00801e71c0.shtml

[rigoberto.cintron]

I don't believe Cisco support HMAC-SHA256 right now. They support HMAC-SHA1 with AES 256 for payload encryption.