Pfs in Pix 6.3

vinoth.kumar · ‎01-27-2009

Hi,

Iam using the PIX firewall 6.3 and my remote peer is cisco router 2801(12.4)

now we are trying to enable PFS for our VPN connection how to enable pfs in PIX firewall

since we are crypto map statement (crypto map testing 19 set )

or we need to create dynamic map entry

Please suggest

Regards,

Vinu

JORGE RODRIGUEZ · ‎01-27-2009

On the pix you can ename pfs in your l2l tunnels as:

example

crypto map set pfs group2

or if using DH group 1 which is default when not specifying keyword group syntax would be:

crypto map set pfs

hope this answers your question

Regards

Jorge Rodriguez