4 Comments on “What is the default group when you configure DiffieHelman?”

1. Kostas says:

   June 5, 2017 at 11:27 am

   According to Cisco documentation right answer is Group 1

   http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/15-mt/sec-ike-for-ipsec-vpns-15-mt-book/sec-key-exch-ipsec.html

   
   
   
   0

   
   
   
   0
   1. smasdm says:

      June 6, 2017 at 5:50 am

      Sorry but the ASA use Group 2
      Answer is correct

      https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ike.html

      
      
      
      0

      
      
      
      0
      1. Mike L says:

         July 10, 2017 at 11:18 pm

         Group 2 is correct. It says it clear in the documentation. “Defaults

         The default Diffie-Hellman group is group 2.”

         Please check for yourself if you doubt it. http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/gh.html

         
         
         
         0

         
         
         
         0
2. Fred says:

   October 28, 2017 at 1:37 pm

   Choose Group 2 if the question mentioned ASA device; otherwise choose G1.

   
   
   
   0

   
   
   
   0