IKEv2 Settings affect IKE notifications and allow you to configure dynamic client support.
|
•
|
Send IKEv2 Cookie Notify - Sends cookies to IKEv2 peers as an authentication tool.
|
|
•
|
IKEv2 Dynamic Client Proposal - SonicOS provides IKEv2 Dynamic Client Support, which provides a way to configure the Internet Key Exchange (IKE) attributes rather than using the default settings.
|
Clicking the Configure button launches the Configure IKEv2 Dynamic Client Proposal dialog.
SonicOS supports these IKE Proposal settings:
|
•
|
DH Group: Group 1, Group 2 (default), Group 5, Group 14, and the following Diffie Hellman groups that are included in Suite B cryptography:
|
|
•
|
|
•
|
If a VPN Policy with IKEv2 exchange mode and a 0.0.0.0 IPSec gateway is defined, however, you cannot configure these IKE Proposal settings on an individual policy basis.
