H3C MSR Series Command Reference Manual page 609

encryption-algorithm { 3des-cbc | aes-cbc-128 | aes-cbc-192 | aes-cbc-256 | des-cbc |
sm1-cbc-128 | sm1-cbc-192 | sm1-cbc-256 | sm4-cbc}
undo encryption-algorithm
In FIPS mode:
encryption-algorithm { aes-cbc-128 | aes-cbc-192 | aes-cbc-256 }
undo encryption-algorithm
Default
In non-FIPS mode, an IKE proposal uses the 56-bit DES encryption algorithm in CBC mode.
In FIPS mode, an IKE proposal uses the 128-bit AES encryption algorithm in CBC mode.
Views
IKE proposal view
Predefined user roles
network-admin
Parameters
3des-cbc: Uses the 3DES algorithm in CBC mode as the encryption algorithm. The 3DES algorithm
uses a 168-bit key for encryption.
aes-cbc-128: Uses the AES algorithm in CBC mode as the encryption algorithm. The AES algorithm
uses a 128-bit key for encryption.
aes-cbc-192: Uses the AES algorithm in CBC mode as the encryption algorithm. The AES algorithm
uses a 192-bit key for encryption.
aes-cbc-256: Uses the AES algorithm in CBC mode as the encryption algorithm. The AES algorithm
uses a 256-bit key for encryption.
des-cbc: Uses the DES algorithm in CBC mode as the encryption algorithm. The DES algorithm
uses a 56-bit key for encryption.
sm1-cbc-128: Uses the SM1 algorithm in CBC mode as the encryption algorithm. The SM1
algorithm uses a 128-bit key for encryption.
sm1-cbc-192: Uses the SM1 algorithm in CBC mode as the encryption algorithm. The SM1
algorithm uses a 192-bit key for encryption.
sm1-cbc-256: Uses the SM1 algorithm in CBC mode as the encryption algorithm. The SM1
algorithm uses a 256-bit key for encryption.
The following matrix shows the support of the MSR routers for the sm1-cbc-128, sm1-cbc-192, and
sm1-cbc-256 keywords:
Hardware
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-10-PoE
/810-LM-HK/810-W-LM-HK
MSR810-LMS/810-LUS
MSR2600-10-X1
MSR 2630
MSR3600-28/3600-51
MSR3600-28-SI/3600-51-SI
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-DP-DC
MSR 3610/3620/3620-DP/3640/3660
Keyword compatibility
Yes
No
No
Yes
Yes
Yes
Yes
Yes
586