What client proposals does SonicWall offer for IPSec and L2TP?
Description
To successfully establish a VPN tunnel the L2TP/GVC (VPN) clients and the Remote VPN device must agree upon the same set of Proposals/Transform Payloads (differs from client to client), please refer the following table for complete details:
List of IPSec and L2TP client proposals:
| Supported Common Configuration which will work with all clients | ||
| Operating System | Phase 1 Proposal | Phase 2 Proposal |
| Windows 7 | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| Windows Vista | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| Windows XP | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| iOs3.x (iPhone 3G/3GS/ iPad) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| iOs4.x (iPhobe4/3GS) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| SonicWall VPN Client (GVC) | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| Supported SonicOS configuration for individual clients which may provide Highest possible security Algorithim , but may not work with other clients | ||
| Operating System | Phase 1 Proposal | Phase 2 Proposal |
| Windows 7 | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
| Windows Vista | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
| Windows XP | PreShared/3-DES/SHA1/Group2 | ESP/3-DES/HMAC-SHA1 |
| iOs3.x (iPhone 3G/3GS/ iPad) | PreShared/3-DES/SHA1/Group2 | ESP/AES-128/HMAC-SHA1 |
| iOs4.x (iPhobe4/3GS) | PreShared/AES-256/SHA1/Group2 | ESP/AES-256/HMAC-SHA1 |
| SonicWall VPN Client (GVC) | PreShared/AES-256/SHA1/Group5 | ESP/AES-256/HMAC-SHA1 |
Detailed Chart of VPN Proposals and Transforms:
| Windows 7 | Windows Vista | Windows XP | iOs3.x (iPhone 3G/3GS/ iPad) | iOs4.x (iPhobe4/3GS) | SonicWall VPN Client (GVC) | |
| Phase 1 Configuration | ||||||
| Proposal #1 | ||||||
| Number Of Transforms 5 | Number Of Transforms 4 | Number Of Transforms 5 | Number Of Transforms 1 | Number Of Transforms 6 | Number of Transform 32 | |
| PreShared/AES-256/SHA1/Group20 | PreShared/AES-128/SHA1/Group19 | PreShared/3-DES/SHA1/Group14 | PreShared/AES-256/SHA1/Group2 | GVC send proposal of various combination using Pre-shared, (AES-256, AES-192,AES-128, 3-DES, DES) , (SHA1,MD5), (Group 1, Group2, Group 5) | ||
| PreShared/AES-128/SHA1/Group19 | PreShared/AES-256/SHA1/Group14 | PreShared/3-DES/MD5/Group2 | PreShared/AES-256/MD5/Group2 | |||
| PreShared/AES-256/SHA1/Group14 | PreShared/3-DES/SHA1/Group14 | PreShared/3-DES/SHA1/Group1 | PreShared/AES-128/SHA1/Group2 | |||
| PreShared/3-DES/SHA1/Group14 | PreShared/3-DES/MD5/Group1 | PreShared/AES-128/MD5/Group2 | ||||
| PreShared/3-DES/MD5/Group2 | ||||||
| PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | PreShared/3-DES/SHA1/Group2 | |
Related Articles
Categories
not finding your answers?