# Which DH groups are supported for ISAKMP and PFS for IPsec?\[SOLVED\]

**URL:** <https://forums.digi.com/t/which-dh-groups-are-supported-for-isakmp-and-pfs-for-ipsec-solved/21490>\
**Category:** Digi TransPort WR (Series)\
**Tags:** ipsec, ike, sha, dhgroup\
**Created:** [June 22, 2020, 7:10am UTC](https://forums.digi.com/t/which-dh-groups-are-supported-for-isakmp-and-pfs-for-ipsec-solved/21490 "2020-06-22T07:10:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jserink](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@jserink](https://forums.digi.com/u/jserink)\
**Post date:** [June 22, 2020, 7:10am UTC](https://forums.digi.com/t/which-dh-groups-are-supported-for-isakmp-and-pfs-for-ipsec-solved/21490/1 "2020-06-22T07:10:32Z")

</div>

Hi All:

The new Libreswan versions do not support the DH2 group anymore and there appears be some typos in the version 19 of the manual.  
Which DH groups are supported for IKE?  
Which DH group are supported for PFS?  
Which SHA authentication versions are supported?

cheers,  
john

---

<div class="post-metadata">

**Author:** ![jserink](https://avatars.discourse-cdn.com/v4/letter/j/bc79bd/32.png) [@jserink](https://forums.digi.com/u/jserink)\
**Post date:** [June 22, 2020, 10:17pm UTC](https://forums.digi.com/t/which-dh-groups-are-supported-for-isakmp-and-pfs-for-ipsec-solved/21490/2 "2020-06-22T22:17:36Z")

</div>

Ok guys, opened up a WR41 with recent FW and answered this myself:  
Here is the data:  
IKE  
Encryption: None, DES, 3DES, AES128, AES192, AES256,  
Authentication: None, MD5, SHA1, SHA256  
Modes: Main, Aggressive,  
MODP Group Phase 1, 1-768, 2-1024, 5-1536, 14-2048,  
MODP Group Phase 2, No PFS, 1-768, 2-1024, 5-1536, 14-2048,

IPSec  
Encryption: None, NULL, DES, 3DES, AES128, AES192, AES256,  
Authentication: None, MD5, SHA1, SHA256  
MODP Group Phase 2, No PFS, 1-768, 2-1024, 5-1536, 14-2048,

The manual is complete inaccurate on this issues and needs a re-write.

Cheers,  
john