IPSec Phase 1 & Phase 2: differences in commands

[azhdar1234]

Hello !

What's difference between "hash sha / encryption aes256" in Phase 1 and "esp-sha256-hmac" in Phase 2 ? Are they the same or are there any difference ?

[Rob Ingram]

Hi,
The algorithms defined in Phase 1 (isakmp policy) are used to establish an IKE SA (Security Association), through which 2 x IPSec SA (inbound/outbound) is negotiated using the Phase 2 algorithms defined in the IPSec Transform Set. All data transmitted through the VPN is over the IPSec SAs.

HTH