Vpn site to site encryption

[NetworkGeek]

Hi All,

i have two different firewalls and need to establish site to site vpn

IKE Phase 1 : Encryptin will be AES-256 CBC and the other peer have only AES-256 without CBC

is it gonna work ?  or it will fail

[BPry]

I've never actually tested this with a Palo Alto device, howeve you will likely get an encryption error and the tunnel will either fail to form up or actually process the traffic. By natue, site to site vpn traffic is meant to match exactly on either side. 

[Raido_Rattameister]

aes-256-cbc is AES-256.

If I am not mistaken then in old versions it was also called aes-256 and was renamed when aes-256-gcm was also added.

So your config should work.