Chapter 11 IPSec VPN
USG FLEX H Series User’s Guide
183
Diffie-Hellman
Groups
Select which Diffie-Hellman key group (DHx) you want to use to create encryption keys.
Choices are DH2, DH5, DH14, DH15, DH16, DH19, DH20, DH21, DH28, DH29, and DH30.
The longer the key, the more secure the encryption, but also the longer it takes to encrypt
and decrypt information. The Zyxel Device and the remote IPSec router must use the same
DH key group. See
Section 11.2 on page 159 for more information on DH key group.
Different operating systems may support different DH key groups. Check your operating
system documentation.
• For Windows VPN clients, Zyxel SecuExtender perpetual VPN clients versions
3.8.203.61.32 and earlier support DH1 to DH14.
• For macOS VPN clients, Zyxel SecuExtender subscription VPN clients versions 1.2.0.7 and
later support DH14 to DH21. For Windows VPN clients, Zyxel SecuExtender subscription
VPN clients versions 5.6.80.007 and later support DH14 to DH21.
• Windows versions 7, 10, 11 built-in IKEv2 VPN clients support DH2 by default.
• macOS versions 14.2 and later built-in IKEv2 VPN clients support DH14 by default.
• iOS versions 10.15 and later built-in IKEv2 VPN clients support DH14 by default.
Apply Click Apply to save your changes back to the Zyxel Device.
Reset Click Reset to return the screen to its last-saved settings.
Table 91 VPN > IPSec VPN > Remote Access VPN (continued)
LABEL DESCRIPTION
To Next Page
Loading...
