DES and 3DES

eltory · ‎08-13-2001

I'm planning to buy a 2651 router for Site-to-Site and Client-to-Site VPN.

The VPN site /remote site can be running with 3Des.

The VPN clients will travel the countries that are some support Des only, some support 3des only and some support both.

The Questions are:

1) Can the router support Des and 3Des in the same time.

2) Is it possible for the VPN clients running Des in some countries and running 3Des in the others.

srg · ‎08-15-2001

1. I am not as familiar with the IPSec implementation in the router IOS, but yes I believe the router can do DES and 3DES at the same time. You just need to make sure you have the recommended amount of memory to support 3DES.

2. You should be able to set up two policies, one using DES and one using 3DES. When the client connects, it and the router will negotiate what type of encryption will be used in the tunnel. If the client says it can only do DES, then the tunnel will be set up with DES.