Microsoft Internet Security and Acceleration Server 2004 SDK

Phase1DHGroup Property of IFPCVpnNetworkIPSecSettings[C++]

FPCVpnNetworkIPSecSettings.Phase1DHGroup [Visual Basic]

[C++]

The Phase1DHGroup property gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPSec negotiation process.

HRESULT get_Phase1DHGroup(
  FpcVpnDiffieHellmanGroup* pPhase1DHGroup
);

HRESULT put_Phase1DHGroup(
  FpcVpnDiffieHellmanGroup Phase1DHGroup
);

Parameters

pPhase1DHGroup
Pointer to a value from the FpcVpnDiffieHellmanGroup enumerated type that is set on return to the value specifying the Diffie-Hellman group to be used in Phase 1 of the IPSec negotiation process.
Phase1DHGroup
Value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPSec negotiation process.

Return Values

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Remarks

This property is read/write. Its default value is fpcVpnDHGroup2, which specifies Diffie-Hellman Group 2.

The Diffie-Hellman group sets the length of the base prime numbers used during the key exchange process. The cryptographic strength of any key derived depends, in part, on this length.

The value fpcVpnDHGroup2048, which specifies Diffie-Hellman Group 2048, is not supported on computers running a Windows 2000 Server operating system.

[Visual Basic]

The Phase1DHGroup property gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPSec negotiation process.

Property Phase1DHGroup As FpcVpnDiffieHellmanGroup

Property Value

Value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 1 of the IPSec negotiation process.

Remarks

This property is read/write. Its default value is fpcVpnDHGroup2, which specifies Diffie-Hellman Group 2.

The Diffie-Hellman group sets the length of the base prime numbers used during the key exchange process. The cryptographic strength of any key derived depends, in part, on this length.

The value fpcVpnDHGroup2048, which specifies Diffie-Hellman Group 2048, is not supported on computers running a Windows 2000 Server operating system.

Requirements

Server: Requires Windows Server 2003 or Windows 2000.
Version: Requires Internet Security and Acceleration Server 2004.
Header: Declared in Msfpccom.idl.
Library: Use Microsoft Internet Security and Acceleration Server 2004 Administration Library.

See Also

FPCVpnNetworkIPSecSettings