Customizing the HQ tunnel

1. In the IPsec Tunnels list, highlight the new tunnel and select Edit.

   

2. In the Edit VPN Tunnel dialog, click Convert to Custom Tunnel.

   

3. Edit the Authentication section and enable IKE Version 2.

   

4. Edit the Phase 1 Proposal section.
   1. Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.

      

5. Edit the Phase 2 Selectors section (don’t click the Add Button) and click Advanced….
   1. Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.
   2. Click OK.