topic Re: Vpn site to site encryption in General Topics

Vpn site to site encryption

NetworkGeek — Thu, 13 Apr 2017 08:42:06 GMT

Hi All,

i have two different firewalls and need to establish site to site vpn

IKE Phase 1 : Encryptin will be AES-256 CBC and the other peer have only AES-256 without CBC

is it gonna work ? or it will fail

Re: Vpn site to site encryption

BPry — Thu, 13 Apr 2017 14:31:02 GMT

I've never actually tested this with a Palo Alto device, howeve you will likely get an encryption error and the tunnel will either fail to form up or actually process the traffic. By natue, site to site vpn traffic is meant to match exactly on either side.

Re: Vpn site to site encryption

Raido_Rattameister — Mon, 17 Apr 2017 03:27:36 GMT

aes-256-cbc is AES-256.

If I am not mistaken then in old versions it was also called aes-256 and was renamed when aes-256-gcm was also added.

So your config should work.