HMAC-SHA-256-128 authentication

HMAC-SHA-256-128 authentication is supported for IPsec proposals and manual security associations on High-end SRX Series devices. You can specify the hmac-sha-256-128 option at the [edit security ipsec proposal proposal-name] and the [edit security ipsec vpn vpn-name manual] hierarchy levels.