Any support for ipsec sha-256 authentication support on srx devices?
As per this URL SHA-2 is supported: https://apps.juniper.net/feature-explorer/feature-info.html?fKey=287&fn=Hash%20Algorithms%20SHA-2%20(SHA-256)
root@my-srx# set security ipsec proposal TEST authentication-algorithm ?Possible completions: hmac-md5-96 HMAC-MD5-96 authentication algorithm hmac-sha-256-128 HMAC-SHA-256-128 authentication algorithm <---------- hmac-sha1-96 HMAC-SHA1-96 authentication algorithm
So that must be interpreted as a no.
SRX SHA-2 impementation is based on RFC-4868: it produces a 256-bit digest, truncated to 128 bits (half)