IKEv2 (SHA256) on NSX VPNs

[ChrisGrahamNoon]

Do we know if/when IKEv2 and SHA256 will be supported on NSX VPNs?  Currently, we use IKEv1 with SHA1 but we would like to upgrade to a more secure encryption/authentication algorithm.

Thanks

Chris Noon

[Sreec]

Not really sure about the roadmap. So far only policy based VPN is supported (IKEV1) & Only following IPSec VPN algorithms are supported:

1. AES
2. AES256
3. Triple DES
4. AES-GCM
5. DH-2
6. DH-5

The best place to check the feature would be with VMware Support team.

[grosas · Accepted solution]

Hi ChrisGrahamNoon   

We inquired about this internally around May this year - it was said to us that is was planned in NSXv 6.4.  That may have changed - and I cannot speak for that team, but wanted to share my previous run in with this question.

I don't know when 6.4 is due for release - Here is the historical cadence of releases, for context..

NSX 6.1 Sept 2014
NSX 6.2 Aug 2015
NSX 6.2.2 Mar 2016
NSX 6.2.3 Jun 2016
NSX 6.2.4 Aug 2016

NSX 6.2.5 05 Jan 2017
NSX 6.3.0 02 Feb 2017
NSX 6.3.1 28 Feb 2017
NSX 6.3.2 08 Jun 2017

NSX 6.3.3 10 Aug 2017

--

Gabe

[ChrisGrahamNoon]

Hi grosas,

Do you know if 6.4 is the next release?  Or at least the next planned release?

Thanks in advance

Chris

[ArmorNetOps]

IKEV2 support was added in NSX 6.4