Phase2DHGroup Property of the IFPCVpnNetworkIPSecSettings Interface

The Phase2DHGroup property gets or sets a value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 2 of the IPsec negotiation process.

[C++]

HRESULT put_Phase2DHGroup(
	FpcVpnDiffieHellmanGroup Phase2DHGroup
);
HRESULT get_Phase2DHGroup(
	FpcVpnDiffieHellmanGroup* pPhase2DHGroup
);

Parameters

pPhase2DHGroup: Pointer to a value from the FpcVpnDiffieHellmanGroup enumerated type that is set on return to the value specifying the Diffie-Hellman group to be used in Phase 2 of the IPsec negotiation process.
Phase2DHGroup: Value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 2 of the IPsec negotiation process.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

[Visual Basic]

Property Phase2DHGroup As FpcVpnDiffieHellmanGroup

Property Value

Value from the FpcVpnDiffieHellmanGroup enumerated type that specifies the Diffie-Hellman group to be used in Phase 2 of the IPsec negotiation process.

Remarks

This property is read/write. Its default value is fpcVpnDHGroup2, which specifies Diffie-Hellman Group 2.

The Diffie-Hellman group sets the length of the base prime numbers used during the key exchange process. The cryptographic strength of any key derived depends, in part, on this length.

Requirements

Client	Requires Windows Vista or Windows XP.
Server	Requires Windows Server 2008.
Version	Requires Forefront Threat Management Gateway (TMG).
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.