Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  Supported encryption of NSGT5?

    Posted 07-02-2014 22:48
    Hi Guys,

    We are about to setup a VPN with a client. Are these encryptions/phases supported in NSGT5? If so, can you tell me the corresponding phases for them as I'm not sure if we have them on our NSGT5.

    Phase 1: AES-256, SHA1, Group5, life = 86,400 sec.
    Phase 2: AES-256, SHA1, life = 28,800 sec.

    Thanks in advanced!

    Arnel

    #Phase1
    #phase2
    #vpn
    #NSGT5


  • 2.  RE: Supported encryption of NSGT5?
    Best Answer

    Posted 07-03-2014 09:17

    Those proposals are support, however, you would have to create a custom proposal set.

     

    For example:

    set ike p1-proposal pre-g5-aes256-sha preshare group5 esp aes256 sha-1 seconds 86400

    set ike p2-proposal esp-aes256-sha1 esp aes256 sha-1 seconds 28800

     



  • 3.  RE: Supported encryption of NSGT5?

    Posted 07-07-2014 06:54

    Thanks rseibert! 🙂