Protocol Requirements for IP Modular Encryption (PRIME) IKEv2 AES-GCM

Support is provided for Protocol Requirements for IP Modular Encryption (PRIME), an IPsec profile defined for public sector networks in the United Kingdom. PRIME uses AES-GCM rather than AES-CBC for IKEv2 negotiations. Both PRIME-128 and PRIME-256 cryptographic suites are supported. The following options are available: 

• The encryption-algorithm options aes-128-gcm and aes-256-gcm are available for proposals configured at the [edit security ike proposal proposal-name] hierarchy level. 
• Predefined proposals prime-128 and prime-256 are available at the [edit security ike policy policy-name proposal-set] and [edit security ipsec policy policy-name proposal-set] hierarchy levels.