topic DH - VPN in General Topics

DH - VPN

hanuman — Tue, 29 Jun 2021 12:47:29 GMT

Hi ,

How can I allow multiple Diffie-Hellman (DH) group in IKE & IPSec profile while creating a VPN

Re: DH - VPN

Remo — Tue, 29 Jun 2021 12:54:51 GMT

DH groups you have to choose 1 per profile. So you can only have one group configured per VPN (ok, they can be different in phase 1 and 2). Only encryption and authentication algorithms you can add more than one.

Re: DH - VPN

hanuman — Tue, 29 Jun 2021 13:38:56 GMT

Thanks Vsys_remo

But on the remote site of VPN connection , we have different vendor firewall which allows Multiple DH group selection. and already selected 2 groups.

Re: DH - VPN

aleksandar.astardzhiev — Tue, 29 Jun 2021 14:09:16 GMT

Hi @hanuman ,

And what will be the purpose to have two DH groups on both peers? Even you can configure more than one peers should agree on most secure one.

Re: DH - VPN

Remo — Tue, 29 Jun 2021 14:23:20 GMT

They agree on the most secure if you configured them i n the righr order 😉