ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

IKEv2 doesn't support ECDH

‎04-29-2015 07:11 AM

Hi,

When i try to set Diffie Helman group 19,20 or 24 on a ikev2 gateway it gives me the following error: IKEv2 doesn't support ECDH.

Is there any way to make it work?(upgrade to which version) I m running ScreenOS 6.3.0 r13 on a SSG320M.

Regards,

tcp

3 REPLIES
ScreenOS Firewalls (NOT SRX)

Re: IKEv2 doesn't support ECDH

‎04-29-2015 10:43 AM

This is currently not supported in any version of ScreenOS.

ScreenOS Firewalls (NOT SRX)

Re: IKEv2 doesn't support ECDH

[ Edited ]
‎12-13-2018 07:28 PM

I know this is an old post. And I am facing this problem now.

Is there any official announcement indicate that IKEv2 cannot be use in ScreenOS? If that's the case, why there is options for select DH 19 & 20?

ScreenOS Firewalls (NOT SRX)

Re: IKEv2 doesn't support ECDH

‎12-18-2018 09:06 AM

DH 19 and 20 are supported with IKEv1, but not with IKEv2.  This is why those options are available when creating P1 proposals, as the P1 proposals are not specific to the IKE version.