Prerequisites for IKEv2 configuration

Determine the following parameters prior to IKEv2 configuration:

• The strength of the algorithms for IKEv2 negotiation, including the encryption algorithms, integrity protection algorithms, PRF algorithms, and DH groups. Different algorithms provide different levels of protection. A stronger algorithm means better resistance to decryption of protected data but requires more resources. Typically, the longer the key, the stronger the algorithm.

• The local and remote identity authentication methods.

  • To use the pre-shared key authentication method, you must determine the pre-shared key.

  • To use the RSA digital signature authentication method, you must determine the PKI domain for the local end to use. For information about PKI, see "Configuring PKI."