How can turn IPSec 3DES encpryp on C8200_1N-4T?

[quang-nv]

Hi everyone,

I want to install ipsec encryption on router C8200_1N-4T. According to the information on the datasheet, the device supports 3DES but currently there is no 3DES option when configuring. (192-aes 256-aes and aes options only)

The software version being used is 17.12.2.

Is there any way to use 3DES on this version?

If not possible, which version supports 3DES?

I appreciate any help

[Rob Ingram]

@quang-nv 3DES is weak, insecure, no longer supported on newer software versions and has been removed. You will need to use AES, which is more secure.

Why must you use 3DES?

[quang-nv]

Hi Rob,

Thank you for responding

Because our old system in all branches and headquarters is using 3DES. Currently, we cannot apply AES right away.

I appreciate your help

[Rob Ingram · Accepted solution]

@quang-nv then your options are to either downgrade to an old IOS-XE version that does support 3DES (not recommended) or change the configuration in the branch routers to use AES (recommended). AES has been supported for a long time so I imagine your branch devices will support AES.

[quang-nv]

Thanks for the response

Can you suggest which version supports 3DES?

We appreciate any suggestions