cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3598
Views
0
Helpful
1
Replies

How to enable SHA2-512 Encryption Algorithm?

highmiles2
Level 1
Level 1

Hello,

I have an ASA-5520 running 8.2(5) OS. According to relase notes, it suppors SHA-2 256, 384 & 512K.
I've setup SSL AnyConnect to use Certificate authentication. All clients are using SHA2-512 for encyrption.

However, and under Configuration --> Remote Access VPN --> Advanced --> SSL Seetings ... I dont find any SHA2 encryption algorithms.

All i see are the AES12-SHA1, 3DES-SHA1, AES256-SHA1....etc

How can enable the SHA2-512 encryption algorithms?

Is it a licensed feature?

Thanks

1 Reply 1

anwesh1711
Level 1
Level 1

Hi,

Have a look on that VPN configuration part.

http://books.google.com.bh/books?id=8bfQunq7aBoC&pg=PT103&lpg=PT103&dq=AnyConnect+sha512&source=bl&ots=r7fCVYl_Ro&sig=HSMOEE3_hQ4v3nN4rMxdtXc6tcw&hl=en&sa=X&ei=4veGU5TyAdCw7AaKsYD4AQ&ved=0CDYQ6AEwAg#v=onepage&q=AnyConnect%20sha512&f=false

 

crypto ikev2 proposal PRO

  encryption aes-256 aes-192

  integrity sha512

  group 14 5 2

 

where sha512 is SHA2-512.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/vpn_ike.html

 

Hope it helps