DH - VPN

[hanuman]

Hi ,

How can I allow multiple Diffie-Hellman (DH) group in IKE  & IPSec profile while creating a VPN 

[Remo]

Hi @hanuman 

DH groups you have to choose 1 per profile. So you can only have one group configured per VPN (ok, they can be different in phase 1 and 2). Only encryption and authentication algorithms you can add more than one.

[hanuman]

Thanks Vsys_remo

But on the remote site of VPN connection , we have different vendor firewall which allows Multiple DH group selection. and already selected 2 groups. 

[aleksandar.astardzhiev]

Hi @hanuman ,

And what will be the purpose to have two DH groups on both peers? Even you can configure more than one peers should agree on most secure one.

[Remo]

They agree on the most secure if you configured them i n the righr order 😉