Configuration Mode Commands : SteelHead Configuration Commands : IPSec Commands : ip security encryption policy
  
ip security encryption policy
Sets the encryption algorithms in order of priority.
Syntax
ip security encryption policy <algorithm> [<alt-algorithm>]
Parameters
<algorithm>
Primary algorithm. If you do not have a valid SSL license key (also called the Enhanced Cryptography License key) installed on your SteelHead, you can specify one of the following encryption algorithms:
•  des - The Data Encryption Standard. This is the default value.
•  null_enc - The null encryption algorithm.
If you have a valid SSL license key installed on your SteelHead, you can specify any of the above encryption algorithms or any of the following more secure encryption algorithms:
•  3des - Triple DES encryption algorithm.
•  aes - The AES 128-bit encryption algorithm.
•  aes256 - The AES 256-bit encryption algorithm.
If you do not specify an encryption algorithm, the default value, des, is used.
<alt-algorithm>
Alternate algorithm. If you do not have a valid SSL license key (also called the Enhanced Cryptography License key) installed on your SteelHead, you can specify one of the following encryption algorithms:
•  des - The Data Encryption Standard. This is the default value.
•  null_enc - The null encryption algorithm.
If you have a valid SSL license key installed on your SteelHead, you can specify any of the above encryption algorithms or any of the following more secure encryption algorithms:
•  3des - Triple DES encryption algorithm.
•  aes - The AES 128-bit encryption algorithm.
•  aes256 - The AES 256-bit encryption algorithm.
If you do not specify an encryption algorithm, the default value, des, is used.
Usage
You must specify at least one algorithm. The algorithm is used to encrypt each packet sent using IPSec.
For detailed information about SSL, see protocol ssl enable.
Example
amnesiac (config) # ip security encryption policy null_enc
Product
SteelHead CX, SteelHead EX, SteelHead-v, SteelHead-c
Related Commands
show ip