ZyXEL Communications USG FLEX H Series User Manual page 183

Table 91 VPN > IPSec VPN > Remote Access VPN (continued)
LABEL DESCRIPTION
Diffie-Hellman Select which Diffie-Hellman key group (DHx) you want to use to create encryption keys.
Groups
Choices are DH2, DH5, DH14, DH15, DH16, DH19, DH20, DH21, DH28, DH29, and DH30.
The longer the key, the more secure the encryption, but also the longer it takes to encrypt
and decrypt information. The Zyxel Device and the remote IPSec router must use the same
DH key group. See
Different operating systems may support different DH key groups. Check your operating
system documentation.
•
•
•
•
•
Apply Click Apply to save your changes back to the Zyxel Device.
Reset Click Reset to return the screen to its last-saved settings.
Chapter 11 IPSec VPN
Section 11.2 on page 159
For Windows VPN clients, Zyxel SecuExtender perpetual VPN clients versions
3.8.203.61.32 and earlier support DH1 to DH14.
For macOS VPN clients, Zyxel SecuExtender subscription VPN clients versions 1.2.0.7 and
later support DH14 to DH21. For Windows VPN clients, Zyxel SecuExtender subscription
VPN clients versions 5.6.80.007 and later support DH14 to DH21.
Windows versions 7, 10, 11 built-in IKEv2 VPN clients support DH2 by default.
macOS versions 14.2 and later built-in IKEv2 VPN clients support DH14 by default.
iOS versions 10.15 and later built-in IKEv2 VPN clients support DH14 by default.
USG FLEX H Series User's Guide
183
for more information on DH key group.