Child-SA-Cipher-List

Specifies which encryption algorithms are enabled in the Child-SA.

SNMP ID:
2.19.36.2.6 
Console path:
Setup > VPN > IKEv2 > Encryption
Possible values:
AES-CBC-256
AES-CBC-192
AES-CBC-128
3DES
AES-GCM-256
Advanced Encryption Standard (AES) 256 in Galois / Counter Mode (GCM)
AES-GCM-192
Advanced Encryption Standard (AES) 192 in Galois / Counter Mode (GCM)
AES-GCM-128
Advanced Encryption Standard (AES) 128 in Galois / Counter Mode (GCM)
Chacha20-Poly1305
ChaCha20 data stream encryption in conjunction with the Poly1305 Authenticator, see RFC 7634, will be supported from LCOS version 10.40.
Important: Please note that ChaCha20-Poly1305 is currently not accelerated by hardware and is therefore not recommended for VPN scenarios where high encryption performance is required.
Default:
AES-CBC-256
AES-GCM-256

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo