Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DES and 3DES

I'm planning to buy a 2651 router for Site-to-Site and Client-to-Site VPN.

The VPN site /remote site can be running with 3Des.

The VPN clients will travel the countries that are some support Des only, some support 3des only and some support both.

The Questions are:

1) Can the router support Des and 3Des in the same time.

2) Is it possible for the VPN clients running Des in some countries and running 3Des in the others.

New Member

Re: DES and 3DES

1. I am not as familiar with the IPSec implementation in the router IOS, but yes I believe the router can do DES and 3DES at the same time. You just need to make sure you have the recommended amount of memory to support 3DES.

2. You should be able to set up two policies, one using DES and one using 3DES. When the client connects, it and the router will negotiate what type of encryption will be used in the tunnel. If the client says it can only do DES, then the tunnel will be set up with DES.