cisco c1121 configure witht encryption aes-gcm-256 not working

[damjorn2023]

Hi,

I currently testing configure IKEv2 encryption with aes-gcm-256 on router c1121 but not working. and on GUI no option aes-gcm-256 to select.

anyone have experience please help?

[Rob Ingram]

@damjorn2023 what firmware version are you running on that router? You may need to upgrade the IOS-XE software to get the stronger crypto.

[damjorn2023]

Router firmware version is 17.12.4. for CLI it's support, I type that command line but it's not working. It's show nothing when I type command showw crypto ikev2 sa. 

[Aref Alsouqi · Accepted solution]

What command in specific? and what do you mean it's not working? does it return any error?

[damjorn2023]

The command is aes-gcm-256 in proposal algorithm. the error is it catches cbc algorithm not gcm when I have more than one policy configure in another router. but now it's working when I configure one policy with within many proposal.

[MHM Cisco World]

not all platform support this encryption.

it platform limitation 

MHM

[Rob Ingram]

the Cisco datasheet confirms AES-GCM is supported.

[MHM Cisco World]

@damjorn2023 @Rob Ingram 

I hope this platform supports this encrypt.

Thanks 

MHM

[damjorn2023]

but the Cisco datasheet confirms AES-GCM is supported.