Unit transmisi maksimum (MTU) adalah ukuran paket terbesar dalam byte yang didukung oleh protokol lapisan jaringan, termasuk header dan payload paket IP.
Paket jaringan yang dikirim melalui tunnel VPN dienkripsi, lalu dienkapsulasi dalam paket luar sehingga dapat dirutekan. Tunnel Cloud VPN menggunakan IPsec dan ESP untuk enkripsi dan enkapsulasi. Karena paket dalam yang dienkapsulasi harus muat di dalam MTU dari paket luar, payload paket IP maksimumnya harus lebih kecil.
VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect tidak mendukung frame jumbo untuk lampiran VLAN terenkripsi.
Enkapsulasi dan pemrosesan paket
Agar berhasil mengirimkan paket menggunakan tunnel Cloud VPN, Anda harus mengaktifkan prafragmentasi di gateway VPN peer sehingga paket yang dikirimkan terfragmentasi sebelum dienkripsi dan dienkapsulasi.
Saat tunnel Cloud VPN memproses paket yang ditujukan untuk jaringan peer Anda:
Cloud VPN menggunakan clamping MSS untuk memastikan bahwa paket TCP sesuai dengan MTU payload sebelum enkapsulasi IPsec.
Untuk protokol lain, Cloud VPN memproses paket sebelum enkapsulasi IPsec sebagai berikut:
- Jika bit
DFpaket disetel, dan gateway Cloud VPN menentukan bahwa fragmentasi diperlukan, gateway Cloud VPN akan mengirim pesan ICMP Fragmentation Needed (IPv4) atau ICMPv6 Packet Too Big kepada pengirim. Pengiriman pesan ICMP atau ICMPv6 mengharuskan Anda mengonfigurasi aturan firewall izinkan masuk yang berlaku untuk pengirim VM Compute Engine – satu aturan untuk mengizinkan masuk ICMP, dan, untuk VM dual-stack, aturan lain untuk mengizinkan masuk ICMPv6. - Jika bit
DFpaket tidak disetel, dan gateway Cloud VPN serta paket melebihi MTU payload, gateway Cloud VPN akan mencoba mengirimkan paket. Paket mungkin diturunkan oleh hop berikutnya setelah tunnel Cloud VPN jika paket terlalu besar untuk next hop.
- Jika bit
Untuk mengetahui informasi umum tentang cara protokol menangani MTU yang tidak cocok, lihat MTU yang tidak cocok, pembatasan MSS, penemuan MTU jalur dalam dokumentasi MTU VPC.
MTU gateway versus MTU payload
Cloud VPN membedakan antara MTU gateway Cloud VPN dan MTU payload Cloud VPN. MTU gateway Cloud VPN adalah:
- 1460 byte, untuk Cloud VPN—VPN Klasik dan VPN dengan ketersediaan tinggi (HA)
- 1440 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect
Konfigurasikan gateway VPN peer Anda untuk menggunakan MTU yang cocok dengan MTU gateway Cloud VPN yang sesuai.
MTU payload untuk tunnel Cloud VPN bergantung pada kedua faktor berikut:
- Cipher yang digunakan tunnel
- Stack IP antarmuka gateway tunnel: IPv4 atau IPv6
Untuk MTU dan sandi gateway tertentu, MTU payload tunnel pada antarmuka gateway IPv6 20 byte lebih kecil daripada MTU payload tunnel pada antarmuka gateway IPv4. Untuk mengetahui informasi selengkapnya, lihat Nilai MTU payload Cloud VPN.
Nilai MTU payload Cloud VPN
MTU payload Cloud VPN bergantung pada cipher yang dipilih di koneksi Cloud VPN Anda.
MTU payload untuk cipher AEAD
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher AEAD yang menggunakan salah satu MTU payload Cloud VPN berikut:
- 1406 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv4
- 1.386 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv6
- 1.386 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect pada antarmuka gateway IPv4
- 1366 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect pada antarmuka gateway IPv6
| Fase 1 | Fase 2 |
|---|---|
| AES-GCM-16-128 | AES-GCM-16-128 |
| AES-GCM-16-192 | AES-GCM-16-192 |
| AES-GCM-16-256 | AES-GCM-16-256 |
| AES-GCM-16-128 | AES-GCM-16-192 |
| AES-GCM-16-192 | AES-GCM-16-128 |
| AES-GCM-16-256 | AES-GCM-16-192 |
| AES-GCM-16-128 | AES-GCM-16-256 |
| AES-GCM-16-192 | AES-GCM-16-256 |
| AES-GCM-16-256 | AES-GCM-16-128 |
MTU payload untuk cipher non-AEAD
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher non-AEAD yang menggunakan salah satu MTU payload Cloud VPN berikut:
- 1.374 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv4
- 1354 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv6
- 1354 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect di antarmuka gateway IPv4
- 1334 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect pada antarmuka gateway IPv6
| Fase 1 - Enkripsi | Fase 1 - Integritas | Fase 2 - Enkripsi | Fase 2 - Integritas |
|---|---|---|---|
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher non-AEAD yang menggunakan salah satu MTU payload Cloud VPN berikut:
- 1.390 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv4
- 1.370 byte: untuk tunnel Cloud VPN di antarmuka gateway IPv6
- 1.370 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect pada antarmuka gateway IPv4
- 1.350 byte: untuk tunnel VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect di antarmuka gateway IPv6
| Fase 1 - Enkripsi | Fase 1 - Integritas | Fase 2 - Enkripsi | Fase 2 - Integritas |
|---|---|---|---|
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
Langkah selanjutnya
- Untuk mempelajari konsep dasar Cloud VPN, lihat ringkasan Cloud VPN.
- Untuk membantu memecahkan masalah umum yang mungkin Anda temui saat menggunakan Cloud VPN, lihat Pemecahan masalah.