Encryption 3DES and DES

Unanswered Question
Jul 9th, 2007


Recently i was configured my C7206 (IOS 12.4.10a) to remote router C2801 (IOS 12.4.9.T1) with ipsec configured via leased line. All the application are working fine if i configured the encryption using DES. However, when i configured the encrytion using 3DES, all the application still work fine except one of the printing job using DLink print server across this ipsec. Configuration as follows:



crypto isakmp policy 30

encryption 3des

hash md5

authentication pre-share

group 2

crypto isakmp key xxxxx address



crypto ipsec transform-set Tunnel-Transform-IPSec ah-sha-hmac esp-aes 256 esp-sha-hmac

mode transport


crypto map IPSEC-R1-R2 101 ipsec-isakmp

set peer

set transform-set Tunnel-Transform-IPSec

match address 101



interface Serial0/1

ip address

mtu 1600

bandwidth 1984

encapsulation ppp

crypto map IPSEC-R1-R2

crypto ipsec df-bit clear



Any one can help?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pkapoor Wed, 07/11/2007 - 08:59

In global configuration mode, enter the following command and see if it works.

"crypto ipsec df-bit clear"

Then test with 3DES.


This Discussion