Cisco OL-4015-08 User Manual page 195

Chapter 8 Site-to-Site VPN
Encryption
Note
OL-4015-08
SDM supports a variety of encryption types, listed in order of security. The more
secure an encryption type is, the more processing time it requires.
Not all routers support all encryption types. Unsupported types will not
•
appear in the screen.
Not all IOS images support all the encryption types that SDM supports. Types
•
unsupported by the IOS image will not appear in the screen.
If hardware encryption is turned on, only those encryption types supported by
•
hardware encryption will appear in the screen.
SDM supports the following types of encryption:
DES—Data Encryption Standard. This form of encryption supports 56-bit
•
encryption.
3DES—Triple DES. This is a stronger form of encryption than DES,
•
supporting 168-bit encryption.
AES-128—Advanced Encryption Standard (AES) encryption with a 128-bit
•
key. AES provides greater security than DES and is computationally more
efficient than 3DES.
AES-192—AES encryption with a 192-bit key.
•
AES-256—AES encryption with a 256-bit key.
•
Cisco Router and Security Device Manager Version 2.2 User's Guide
Create Site to Site VPN
8-41