Can ESP be
used for encryption but not for authentication?
ESP can encrypt and authenticate packets at the same time, or only encrypt or
authenticate packets. The undo esp authentication-algorithm command can be used to set the authentication algorithm to null. That is, no
authentication is required. Note that this command takes effect only when an
authentication algorithm is used.
It is not recommended to use ESP only for encryption because security cannot be
ensured without authentication.