Cisco recommends using AES-CBC for encryption and SHA1 for authentication to protect against performance risks to some of its Catalyst and ASR gear. To reduce the risk of service problems, Cisco is ...