Description

Wondering what Cipher Suites are needed for Juniper SRX345 to function.

Solution

> Supported IPsec parameters:

  • One ike authentication-algorithm from any of the following:

 md5         MD5 authentication algorithm

 sha-256       SHA 256-bit authentication algorithm

 sha-384       SHA 384-bit authentication algorithm

 sha1         SHA1 authentication algorithm

  

  • One ike authentication-methods from any of the following:

 dsa-signatures    DSA signatures

 ecdsa-signatures-256 ECDSA signatures (256 bit modulus)

 ecdsa-signatures-384 ECDSA signatures (384 bit modulus)

 pre-shared-keys   Preshared keys

 rsa-signatures    RSA signatures

 

  • One ike encryption-algorithm from any of the following:

 3des-cbc       3DES-CBC encryption algorithm

 aes-128-cbc     AES-CBC 128-bit encryption algorithm

 aes-128-gcm     AES-GCM 128-bit encryption algorithm

 aes-192-cbc     AES-CBC 192-bit encryption algorithm

 aes-256-cbc     AES-CBC 256-bit encryption algorithm

 aes-256-gcm     AES-GCM 256-bit encryption algorithm

 des-cbc       DES-CBC encryption algorithm

 

  • One ipsec authentication-algorithm from ay of the following:

 hmac-md5-96     HMAC-MD5-96 authentication algorithm

 hmac-sha-256-128   HMAC-SHA-256-128 authentication algorithm

 hmac-sha1-96     HMAC-SHA1-96 authentication algorithm

 

  • And one ipsec encryption-algorithm from any of the following:

 3des-cbc       3DES-CBC encryption algorithm

 aes-128-cbc     AES-CBC 128-bit encryption algorithm

 aes-128-gcm     AES-GCM 128-bit encryption algorithm

 aes-192-cbc     AES-CBC 192-bit encryption algorithm

 aes-192-gcm     AES-GCM 192-bit encryption algorithm

 aes-256-cbc     AES-CBC 256-bit encryption algorithm

 aes-256-gcm     AES-GCM 256-bit encryption algorithm

des-cbc       DES-CBC encryption algorithm

Modification History

2023-10-04 : Article Created
12/7/2023: Formatting corrections made.