IKEv2 - Signature authentication

Secure your IPsec VPN service that runs using the iked process with IKEv2 signature authentication based on RFC 7427. Enable this feature by using the following options:

• digital-signature—Configure this option at the [edit security ike proposal proposal-name authentication-method] hierarchy level to enable the signature authentication method. You can use this method only if your device exchanges a signature hash algorithm with the peer.
• signature-hash-algorithm—Configure this option at the [edit security ike proposal proposal-name] hierarchy level to enable the peer device to use one or more specific signature hash algorithms (SHA1, SHA256, SHA384, and SHA512). Note that the IKE peers can use different hash algorithms in different directions.