What client proposals does SonicWall offer for IPSec and L2TP?
03/26/2020 16 People found this article helpful 459,946 Views
Description
To successfully establish a VPN tunnel the L2TP/GVC (VPN) clients and the Remote VPN device must agree upon the same set of Proposals/Transform Payloads (differs from client to client), please refer the following table for complete details:
List of IPSec and L2TP client proposals:
Supported Common Configuration which will work with all clients |
Operating System | Phase 1 Proposal | Phase 2 Proposal |
Windows 7 | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
Windows Vista | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
Windows XP | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
iOs3.x (iPhone 3G/3GS/ iPad) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
iOs4.x (iPhobe4/3GS) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
SonicWall VPN Client (GVC) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
Supported SonicOS configuration for individual clients which may provide Highest possible security Algorithim , but may not work with other clients |
Operating System | Phase 1 Proposal | Phase 2 Proposal |
Windows 7 | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
Windows Vista | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
Windows XP | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
iOs3.x (iPhone 3G/3GS/ iPad) | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
iOs4.x (iPhobe4/3GS) | PreShared/AES-256/SHA1/Group2 | ESP/AES-256/HMAC-SHA1 |
SonicWall VPN Client (GVC) | PreShared/AES-256/SHA1/Group5 | ESP/AES-256/HMAC-SHA1 |
Detailed Chart of VPN Proposals and Transforms:
| Windows 7 | Windows Vista | Windows XP | iOs3.x (iPhone 3G/3GS/ iPad) | iOs4.x (iPhobe4/3GS) | SonicWall VPN Client (GVC) |
Phase 1 Configuration | | | | | | |
Proposal #1 | | | | | | |
| Number Of Transforms 5 | Number Of Transforms 4 | Number Of Transforms 5 | Number Of Transforms 1 | Number Of Transforms 6 | Number of Transform 32 |
| | | | | | |
| PreShared/AES-256/SHA1/Group20 | PreShared/AES-128/SHA1/Group19 | PreShared/3-DES/SHA1/Group14 | | PreShared/AES-256/SHA1/Group2 | GVC send proposal of various combination using Pre-shared, (AES-256, AES-192,AES-128, 3-DES, DES) , (SHA1,MD5), (Group 1, Group2, Group 5) |
| PreShared/AES-128/SHA1/Group19 | PreShared/AES-256/SHA1/Group14 | PreShared/3-DES/MD5/Group2 | | PreShared/AES-256/MD5/Group2 |
| PreShared/AES-256/SHA1/Group14 | PreShared/3-DES/SHA1/Group14 | PreShared/3-DES/SHA1/Group1 | | PreShared/AES-128/SHA1/Group2 |
| PreShared/3-DES/SHA1/Group14 | | PreShared/3-DES/MD5/Group1 | | PreShared/AES-128/MD5/Group2 |
| | | | | PreShared/3-DES/MD5/Group2 |
| PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 |
| | | | | | |
| | | | | | |
Related Articles
Categories
Was This Article Helpful?
YESNO