Ipsec Specifications; Index - Alcatel-Lucent OmniSwitch 6850-48 Network Configuration Manual

IPsec Specifications

IPsec Specifications
RFCs Supported
Encryption Algorithms Supported for ESP
Key lengths supported for Encryption Algo-
rithms
Authentication Algorithms Supported for
AH
Key lengths supported for Authentication
Algorithms
Master Security Key formats
Priority value range for IPsec Policy
Index value range for IPsec Policy Rule
SPI Range
Modes Supported
Platforms Supported
page 27-2
4301 - Security Architecture for the Internet Proto-
col
4302 - IP Authentication Header (AH)
4303 - IP Encapsulating Security Payload (ESP)
4305 - Cryptographic Algorithm Implementation
Requirements for ESP and AH
4308 - Cryptographic Suites for IPsec
NULL, DES-CBC, 3DES-CBC, AES-CBC, and
AES-CTR
DES-CBC - 64 bits
3DES-CBC - 192 bits
AES-CBC - 128, 192, or 256 bits
AES-CTR - 160, 224, or 288 bits
HMAC-SHA1-96, HMAC-MD5-96, and AES-
XCBC-MAC-96
HMAC-MD5 - 128 bits
HMAC-SHA1 - 160 bits
AES-XCBC-MAC - 128 bits
Hexadecimal (16 bytes) or String (16 characters)
1 - 1000
1 - 10
256 - 999999999
Transport
OmniSwitch 6850, 9000, and 9000E
OmniSwitch AOS Release 6 Network Configuration Guide
Configuring IPsec
September 2009