How Do I Disable PFS When Creating a VPN Connection?
- Huawei Cloud
In the VPN connection configuration, set PFS in the IPsec policy to Disable. By default, PFS is enabled on Huawei Cloud.
- Customer gateway in your on-premises data center
By default, PFS is disabled on some vendors' devices. For details about how to disable PFS, see the corresponding product documentation.
Ensure that the PFS settings on the Huawei Cloud and the customer gateway are consistent. Otherwise, the negotiation will fail.
For security purposes, you are advised to enable PFS on both Huawei Cloud and the customer gateway.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.