encr_algs

This option enables IPsec ESP for a tunnel with the specified encryption algorithm. The option has the following format:

encr_algs encryption_algorithm

For the algorithm, you can specify either a number or an algorithm name. You must specify all IPsec tunnel properties on the same command line. To disable tunnel security, specify the following option:

encr_algs none

If you specify an ESP authentication algorithm, but not an encryption algorithm, ESP's encryption value defaults to the parameter null.

See the ipsecesp(7P) man page or Table 1–2 for a list of available encryption algorithms and for pointers to the algorithm man pages.