How to set VPN Aggressive Mode on USG FLEX H?

Zyxel_Emily
Posts: 1,422
Zyxel Employee





in VPN
Question:
I cannot adjust the Negotiation Mode on web GUI. How can I set the VPN Negotiation Mode to Aggressive on a USG FLEX H firewall?
Answer:
Currently, the Negotiation Mode does not have a GUI configuration option. You can set it using CLI instead. Assuming you have already added a site-to-site VPN named testvpn1 (IKEv1) via the GUI.
usgflex200h> edit running
usgflex200h running config# vrf main ike ike-policy-template testvpn1 aggressive true
usgflex200h running config# show config vrf main ike ike-policy-template testvp1
Tagged:
0
Categories
- All Categories
- 434 Beta Program
- 2.6K Nebula
- 171 Nebula Ideas
- 117 Nebula Status and Incidents
- 6.1K Security
- 403 USG FLEX H Series
- 296 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 43 Wireless Ideas
- 6.7K Consumer Product
- 267 Service & License
- 412 News and Release
- 87 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 83 Security Highlight