Secure character length for a pre-shared key

steve0miller · ‎12-07-2007

Hey folks,

We're implementing a router-to-router IPSEC VPN using pre-shared keys. How many characters would you use in order to fell as though you have a "strong" pre-shared key?

Also, while testing this in the lab, I noticed that although I have "service password-encryption" enabled, the pre-shared keys show up in plaintext next to my "crypto isakmp key" commands. Any way to hide it?

Thanks,

SM

ccbootcamp · ‎12-07-2007

I like to use a minimum of 12 char. mixing it up between upper case, lower case, numeric, and symbols. Just my rule of thumb.

No way to hide the key, sorry. Just use some crazy, long key that makes no sense. Heck, but the word ENCRYPTED before or after it as well and you'll really confuse someone!!! :)

-brad

www.ccbootcamp.com

(please rate the post if this helps!)

royalblues · ‎12-07-2007

Mostly the key length is kept a minimum of 8 characters alpha-numeric

Brad, you can now hide the key with the AES encryption.

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a0080455ad9.html#wp1072242

HTH

Narayan