In the config for ikev2 you can specify multiple DH groups. Does that work like the multiple ike polices where they're all sent and they agree on the first proposal?
for example:
crypto ikev2 policy 10
group 1 2 5
Does this mean the ASA sends a request to use either DH group 1, 2, or 5. And just matches the first one that the responder says it's willing to do?
Thanks.