IPSec DH values

jeffjohn1941

Quick question.  I have a permanent site-to-site IPSEC VPN connection (Uk-Fr) between SBG3300 and a Zywall.  Recommended profile settings invariably show a DH Group value of 2, generally viewed as low these days. Is 2 the highest value I can use?

Zyxel_Stanley

Hi @jeffjohn1941

Welcome to Zyxel community.  

The highest Diffie-Hellman Groups on SBG3300 is up to DH5. (DH1/DH2/DH5)

On ZyWALL series can support up to DH14. (DH1/DH2/DH5/DH14)

Zyxel_Stanley

Hi @jeffjohn1941

Welcome to Zyxel community.  

The highest Diffie-Hellman Groups on SBG3300 is up to DH5. (DH1/DH2/DH5)

On ZyWALL series can support up to DH14. (DH1/DH2/DH5/DH14)