Diffie Hellman Group support

Options
Cyril
Cyril Posts: 1 image  Freshman Member
edited April 2021 in Security
Hi Zyxel team,

I have a Zywall 110 with FW 4.32 and i try to configure IPSEC VPN with PFS Diffie Hellman Group of 15 but zyxel only support 1,2,5 and 14. (i must to use DH15)

Could you help me ?

All Replies

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,436 image  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Eighth Anniversary
    Hi @Cyril
    The DH group 15 is not support yet.
    So I would like to add this topic to idea.
  • Plats
    Plats Posts: 12 image  Freshman Member
    First Comment Sixth Anniversary
    I got a reply from Maurice
    that they are working on higher DH groups (however they have not specified what groups.

    "higher Diffie Hellman Groups will be implemented in an upcoming firmware update, this was confirmed by our development." - 10. sep.




  • Zyxel_Vic
    Zyxel_Vic Posts: 323 image  Zyxel Employee
    25 Answers First Comment Friend Collector Eighth Anniversary
    Hi @Cyril  
    Higher DH groups is already in our roadmap in 2019.
  • Alfonso
    Alfonso Posts: 257 image  Master Member
    5 Answers First Comment Friend Collector Second Anniversary
    Is there any estimated date to be delivered?
  • Zyxel_Vic
    Zyxel_Vic Posts: 323 image  Zyxel Employee
    25 Answers First Comment Friend Collector Eighth Anniversary
    @Alfonso
    The schedule is not firmed yet. But we do have the plan to improve this part.
  • Alfonso
    Alfonso Posts: 257 image  Master Member
    5 Answers First Comment Friend Collector Second Anniversary
    It sounds great @Zyxel_Vic. Thanks for your answer.
  • Zyxel_Joshua
    Zyxel_Joshua Posts: 62 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security 5 Answers First Comment Friend Collector
    ZLD 4.35 is released.
    Now the IPSec DH group support up to 18.

  • Rene_Sidler
    Rene_Sidler Posts: 4 image  Freshman Member
    First Comment Seventh Anniversary
    Is support for DH21 or DH30 also on the roadmap? For example on ATP500

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）