Changing VPN Encryption Levels

[bubarooni]

I need to change the encryption level on a PIX 506, v 6.3(4).

Can I do this by changing my transform set:

crypto ipsec transform-set s2s1trans esp-des esp-md5-hmac

to:

crypto ipsec transform-set s2s1trans esp-3des esp-md5-hmac

on the PIX?

Thanks

 

[beridor]

that looks right - you need to make sure that you have a 3DES license as I'm sure that Cisco charge extra for that - and obviously modify the client profiles as well.

Dave

 

[bubarooni]

Excellent! I just couldn't believe it would be that easy. I did get a 'key' from cisco that upgraded the license to 3DES/AES. I was a little worried about trying it, since I don't have a test environment, it has to be done in production.

Thanks

 

[lgarner]

Cisco doesn't charge for the 3DES key any more.

 

[bubarooni]

Yeah, I just sent a request and they sent me back a key. It says it's 3DES/AES enabled now. Could I use the AES encryption as well then?