`encryption`

Configures an encryption algorithm for an Internet Key Exchange version 2 (IKEv2) proposal.

Syntax

encryption { aes-cbc-128 | aes-cbc-256 }

no encryption { aes-cbc-128 | aes-cbc-256 }

Command Default

The default encryption algorithm is AES-CBC-256.

Parameters

aes-cbc-128: Specifies the 128-bit advanced encryption standard algorithm in cipher block chaining mode.
aes-cbc-256: Specifies the 256-bit advanced encryption standard algorithm in cipher block chaining mode.

Modes

IKEv2 proposal configuration mode

Usage Guidelines

Multiple encryption algorithms may be configured for an IKEv2 proposal.

When only one encryption algorithm is configured for an IKEv2 proposal, removing it restores the default configuration.

The no form of the command removes the specified encryption algorithm configuration.

Examples

The following example shows how to configure the AES-CBC-128 encryption algorithm for an IKEv2 proposal named ikev2_proposal.

device(config)# ikev2 proposal ikev2_proposal
device(config-ikev2-proposal-ikev2_proposal)# encryption aes-cbc-128

History

Release version	Command history
08.0.50	This command was introduced.

encryption