I searched for the highest available Diffie-Hellman on a Cisco RV3xx series router, but I found out that at first this router did not support IKEv2.
After a firmware update in November/December Cisco added IKEv2. But I cannot find the complete specifications for the highest available L2L VPN settings after this firmware update.
Does anybody have a Cisco RV3xx series router with the latest firmware and could he or she let me know the highest available settings for a L2L / Site-to-Site VPN tunnel configured with IKEv2.
I'd like to use Diffie-Hellman group 14 or higher as this is a requirement from an external party.
Go to Solution.
Only group 2 and 5 you can select. No other.
View solution in original post
Thank you for the reply. This is indeed what I wanted to know. Disappointed that the Diffie-Hellman group doens't go beyond group 5.
On this page Cisco themselves anounced their recommendation on the minimum cryptography settings:
[quote]Appendix A: Minimum Cryptography Recommendations
The following table lists recommended cryptographic algorithms that satisfy minimum security requirements for technology as of October 2015.
Table 3. Recommended Minimum Security Algorithms
These recommendations have been in effect since October 2015. The Cisco RV345 has been released on 21 feb 2017.
Anyways, I've got my answer so the thread can be closed.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: