Announcements • feature request: ipsecprofiles / ipsec peers

Good day,

feature request: ipsecprofiles / ipsec peers
ipsec/profile (phase1) multiple values for hash and prf algorithms
--and / or--
mutilple identical ipsec peers (with the exception of profile selection)

feature request:

ipsec/profile (phase1) multiple values for hash and prf algorithms
--and / or--
mutilple identical ipsec peers (with the exception of profile selection)

Windows demands the same algo for both hash and prf. for example i can set up SHA256/SHA256 or SHA1/SHA1,
but e.g android 11 accepts only hash:SH256 and prf:SHA1 for IKEv2/PSK VPN.

It is impossible to handle both types of clients here.
Auto setting for prf seems to use SHA1.

It is possible to create multiple profiles with different settings,
but only one of them can be selected in the corresponding peer definition.

Maybe it will be possible in the future to extend profile config to accept more than one value for hash/prf
or/and
to handle all peers which only differ in the profile definition without the error: this entry is unreachable?

many thanks

Statistics: Posted by pedkoschi — Sun Mar 10, 2024 1:08 pm

---