Customizing the HQ tunnel
- In the IPsec Tunnels list, highlight the new tunnel and select Edit.
- In the Edit VPN Tunnel dialog, click Convert to Custom Tunnel.
- Edit the Authentication section and enable IKE Version 2.
- Edit the Phase 1 Proposal section.
- Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.
- Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.
- Edit the Phase 2 Selectors section (don’t click the Add Button) and click Advanced….
- Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.
- Click OK.