encr_algs

This option enables IPsec ESP for a tunnel with the encryption algorithm specified. It has the following format:

encr_auth_algs encryption_algorithm

For the algorithm, you can specify either a number or an algorithm name. You must specify all IPsec tunnel properties on the same command line. To disable tunnel security, specify the following option:

encr_alg none

If you specify an ESP authentication algorithm, but not encryption algorithm, the ESP encryption value defaults to the parameter null.