Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
Hi All,We have a requirement VPN IKE upgradation like below...VPN running on IKEv1 now."Client wants to upgrade VPN from IKE V1 to IKE V2",how to proceed and what we have to check on firewall. please help on this requirement. Topology: Our side-----Client sideThanksRakesh
Both sides will need to change the proposals to the new and agreed upon settings before this will take effect.When the change is made the tunnel will bounce so traffic will be interrupted.The new IKE settings would be created as a proposalThen removing the old proposal in the gateway configuration with the new one having the agreed IKEv2 settingsexamplehttps://supportportal.juniper.net/s/article/vSRX-SRX-Example-Site-to-site-IPSEC-IKEv2-VPN-configuration-between-vSRX-and-strongSwan-using-pre-shared-keys