Query on IKEv2 Phase2 parameters

Connected123 — Fri, 06 Aug 2021 10:21:42 GMT

Hello,

We are thinking of peering Cisco ISR G2 Router with PA-VM (deployed in Azure).

In Cisco, ESP-AES-256 is used for Encryption and ESP-SHA-256 is used for Authentication.

I can see that these two options are not available in PA-VM.

In that case, what should we select in PA-VM so that we can create a site-to-site tunnel with the Cisco peer?

Thanks in advance.

Re: Query on IKEv2 Phase2 parameters

SebRupik — Fri, 06 Aug 2021 12:52:06 GMT

Hi there,

Under Network -> Network Profiles -> IPSec Crypto :

The Palo equivalent would be:

Although not explicitly referenced in the config, cisco uses CBC. I will see if I can find a command reference/ document.

cheers,

Seb.