How to set VPN Aggressive Mode on USG FLEX H?

Zyxel_Emily
Zyxel_Emily Posts: 1,411  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

Question:
I cannot adjust the Negotiation Mode on web GUI. How can I set the VPN Negotiation Mode to Aggressive on a USG FLEX H firewall?

Answer:
Currently, the Negotiation Mode does not have a GUI configuration option. You can set it using CLI instead. Assuming you have already added a site-to-site VPN named testvpn1 (IKEv1) via the GUI.

usgflex200h> edit running
usgflex200h running config# vrf main ike ike-policy-template testvpn1 aggressive true
usgflex200h running config# show config vrf main ike ike-policy-template testvp1

Tagged: