Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Can Cisco ASR 1001 support DH Group 14 or 16 in IPSEC Phase 2?

Hello,

 

WE have an ASR 1001 for for our IPSEC Customers. I would like to know if ASR 1001 supports Dh group 14 or 16 in PHASE2.

 

What is the highest group that ASR1001 can support

 

Thanks

HBK

1 REPLY
New Member

Hi. Harish According to Cisco

Hi. Harish 

According to Cisco doc's it is mentioned that we can use DH group 14 or 16 and in the command references you can also check the command used to run this group.

As these groups are added in Cisco IOS XE Release 2.2
These commands are further modified in the version 15.1(2)T to use with IKEv2 proposals.

According to Cisco Recommendation the 2048 bit group 14 and 24 can be used till 2030.

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cr-f1.html#wp2511113701

Regards,
Rahul Chhabra
Network Engineer
Spooster IT Services
 

 

178
Views
0
Helpful
1
Replies
CreatePlease to create content