Which VPN-related RFC's and drafts are supported in SonicWall firmware?

Description

Which VPN-related RFC's and drafts are supported in SonicWall firmware?

Resolution

In the older SonicWall firmware 6.x (GEN2/GEN3), SonicOS 2.x/3.x Standard, and SonicOS 2.x/3.x Enhanced, the following are supported:

Internet Drafts
‘Negotiation of Nat-Traversal in the IKE’, drafts 00 (Standard only)
 
RFCTITLE
RFC 1825Security Architecture for the Internet Protocol (obsoleted by RFC 2401) 
RFC 1826IP Authentication Header (obsoleted by RFC 2402)
RFC 1827IP Encapsulating Security Payload (ESP) (obsoleted by RFC 2406)
RFC 1828IP Authentication using Keyed MD5
RFC 1829The ESP DES-CBC Transform
RFC 2085HMAC-MD5 IP Authentication with Replay Prevention
RFC 2104HMAC: Keyed-Hashing for Message Authentication
RFC 2401Security Architecture for the Internet Protocol
RFC 2402IP Authentication Header
RFC 2403The Use of HMAC-MD5-96 within ESP and AH
RFC 2404The Use of HMAC-SHA-1-96 within ESP and AH
RFC 2405The ESP DES-CBC Cipher Algorithm With Explicit IV
RFC 2406IP Encapsulating Security Payload (ESP)
RFC 2407The Internet IP Security Domain of Interpretation for ISAKMP
RFC 2408Internet Security Association and Key Management Protocol (ISAKMP)
RFC 2409The Internet Key Exchange (IKE)
RFC 2410The NULL Encryption Algorithm and Its Use With IPsec
RFC 2411IP Security Document Roadmap
RFC 2451The ESP CBC-Mode Cipher Algorithms
RFC 3526More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
RFC 3602The AES-CBC Cipher Algorithm and Its Use with IPsec
RFC 3706A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers (Enhanced only)
RFC 3947Negotiation of NAT-Traversal in the IKE (Enhanced only)
RFC 4306Internet Key Exchange (IKEv2) Protocol (Enhanced only)



 

Related Articles

  • How to block ICMP (Ping ) using Application control
    Read More
  • SonicWall GEN8 TZ and NSa Firewalls FAQ
    Read More
  • How to configure Link Aggregation
    Read More
not finding your answers?