IKE/5/IKE_UNSAFE_ALGO

Message

IKE/5/IKE_UNSAFE_ALGO: Peer chose unsafe algorithm to establish IKE SA. (PeerIp=[PeerIp], VRF=[VRF], EncryptionAlgorithm=[EncryptionAlgorithm], AuthenticationAlgorithm=[AuthenticationAlgorithm])

In VS mode, this log is supported only by the admin VS.

Description

Peers used unsafe algorithm to create IKE security association.

Parameters

Parameter Name	Parameter Meaning
PeerIp	Indicates IKE peer IP.
VRF	Indicates Virtual Routing and Forwarding (VRF) concept used to support VPNs in IP networks.
EncryptionAlgorithm	Indicates encryption algorithms.
AuthenticationAlgorithm	Indicates authentication algorithms.

Possible Causes

Peer negotiates to establish an IKE SA using unsafe authentication and encryption algorithms like MD5, SHA1, DES and 3DES.

Procedure

Configure safe authentication and encryption algorithms on both the peers like AES and SHA2-256.