Compatibility between aes-cbc-256 and aes-gcm-256 encryption.

ramses.sevilla

Hi everyone,

I need configure a VPN IPsec between a pfSense 2.4.5 and other Remote Firewall.

The Admin from the Remote Site tell me that the Remote Firewall has configured aes-cbc-256 encryption but my pfSense 2.4.5 hasn't this encryption type.

would It work if I configure aes-gcm-256 in my pfSense to connect to the Remote Firewall that has configured aes-cbc-256 encryption?

Regards,

Ramsés

jimp

The two are different, they can't work together. But you do have AES 256 on pfSense in IPsec. Select AES with a key length of 256.

ramses.sevilla

@jimp, thanks so much by your answer.

Then if I configure in my pfSense:

Encryption Algorithm:

Algorithm: AES
Key length: 256

It can connect with the Remote Firewall that has configured aes-cbc-256 encryption?

Regards,

Ramsés

jimp

Yes, that is the same encryption.

ramses.sevilla

Thanks so much.

Ramses