This option enables IPsec ESP for a tunnel with a specified encryption algorithm. The encr_algs option has the following format:
encr_algs encryption-algorithm |
For the algorithm, you can specify either a number or an algorithm name. To disable tunnel security, specify the following option:
encr_algs none |
If you specify an ESP authentication algorithm, but not an encryption algorithm, ESP's encryption value defaults to the parameter null.
For a list of available encryption algorithms, run the ipsecalgs command.