CBC

In all the vendor documentation I find, examples for setting up IPSec tunnels use some of the worst encryption possible.