Junos OS

last person joined: 6 days ago 

Ask questions and share experiences about Junos OS.
  • 1.  ipsec sha-256 authentication support

    Posted 12-17-2018 02:27

    Any support for ipsec sha-256 authentication support on srx devices?



  • 2.  RE: ipsec sha-256 authentication support



  • 3.  RE: ipsec sha-256 authentication support
    Best Answer

    Posted 12-17-2018 02:58

    root@my-srx# set security ipsec proposal TEST authentication-algorithm ?
    Possible completions:
      hmac-md5-96          HMAC-MD5-96 authentication algorithm
      hmac-sha-256-128     HMAC-SHA-256-128 authentication algorithm <----------
      hmac-sha1-96         HMAC-SHA1-96 authentication algorithm

     



  • 4.  RE: ipsec sha-256 authentication support

    Posted 12-17-2018 03:07

    So that must be interpreted as a no.



  • 5.  RE: ipsec sha-256 authentication support

    Posted 12-17-2018 03:26

    SRX SHA-2 impementation is based on RFC-4868: it produces a 256-bit digest, truncated to 128 bits (half)

    https://tools.ietf.org/html/rfc4868#section-2.3