Bug ID 995937: In IPsec, support AES-GCM on IKE Peer phase 1

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP AFM(all modules)

Fixed In:
17.1.0

Opened: Feb 21, 2021

Severity: 4-Minor

Symptoms

The IKEv2 phase 1 does not support AES-GCM protocol for Authentication and Encryption algorithms.

Impact

Cannot establish IKEv2 phase 1 using AES-GCM.

Conditions

Configuring IKE Peer.

Workaround

None

Fix Information

Added AES-GCM support for IKEv2 phase 1. Configure AES-GCM at IKE Peer and establish an IKEv2 phase 1 tunnel.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips