Configurable pseudorandom function in IKEv2 with iked process

You can configure Internet Key Exchange version 2 (IKEv2) proposals with a specific pseudorandom function (PRF) algorithm independent of the authentication algorithm. Use the prf-algorithm option to configure the following algorithms at the [edit security ike proposal proposal-name] hierarchy level in the IPsec VPN service with the iked process:

• prf-hmac-sha-256
• prf-hmac-sha-384
• prf-hmac-sha-512
• prf-hmac-sha1

You cannot combine a PRF with Authenticated Encryption with Associated Data (AEAD) cipher suites such as AES-GCM or ChaCha20-Poly1305 algorithm.