Diffie-Hellman key agreement algorithm to be used for IPsec-SA session key establishment: o any: accept all algorithms as responder, use all as IKEv2 initiator (not allowed as IKEv1 initiator) o modp768: RSA with 768 bits modulus o modp1024: RSA with 1024 bits modulus o modp1536: RSA with 1536 bits modulus o modp2048: RSA with 2048 bits modulus o modp3072: RSA with 3072 bits modulus o modp4096: RSA with 4096 bits modulus o none: no Perfect Forward Secrecy (PFS)