Hi Jafar, > Thanks for the correction. What I meant to say is : > > The PRF algorithm is derived from the integrity algorithm, > but only if a DH group is also configured. > > Correct?
No, the DH group has nothing to do with the PRF or the integrity algorithm. And for IKE proposals you always have to configure at least one DH group. Regards, Tobias
