VPN Client Negotiates an IKE Security Association
The client attempts to establish an SA between the client and server peer Internet Protocol
(IP) addresses by sending multiple IKE proposals to the Easy VPN Server. To reduce manual
configuration on the VPN Client, these IKE proposals include several combinations of the
following parameters:
■ Encryption and hash algorithms
■ Authentication methods
■ Diffie-Hellman (DH) group sizes
Proposing multiple IKE proposals with various parameters means that one combination is
likely to match one of the options configured on the server.