Unit transmisi maksimum (MTU) adalah ukuran paket terbesar dalam byte yang didukung oleh protokol lapisan jaringan, termasuk header dan payload paket IP.
Paket jaringan yang dikirim melalui tunnel VPN dienkripsi, lalu dienkapsulasi dalam paket luar sehingga dapat dirutekan. Tunnel Cloud VPN menggunakan IPsec dan ESP untuk enkripsi dan enkapsulasi. Karena paket dalam yang dienkapsulasi harus muat di dalam MTU dari paket luar, payload paket IP maksimumnya harus lebih kecil.
VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect tidak mendukung frame jumbo untuk lampiran VLAN terenkripsi.
Enkapsulasi dan pemrosesan paket
Agar berhasil mengirimkan paket menggunakan tunnel Cloud VPN, Anda harus mengaktifkan prafragmentasi di gateway VPN peer sehingga paket yang dikirimkan terfragmentasi sebelum dienkripsi dan dienkapsulasi.
Saat tunnel Cloud VPN memproses paket yang ditujukan untuk jaringan peer Anda:
Cloud VPN menggunakan clamping MSS untuk memastikan paket TCP sesuai dengan MTU payload sebelum enkapsulasi IPsec.
Untuk protokol lainnya, Cloud VPN memproses paket sebelum enkapsulasi IPsec sebagai berikut:
- Jika bit
DFpaket ditetapkan, dan gateway Cloud VPN menentukan bahwa fragmentasi diperlukan, gateway Cloud VPN akan mengirimkan pesan ICMP Fragmentation Needed (IPv4) atau ICMPv6 Packet Too Big ke pengirim. Pengiriman pesan ICMP atau ICMPv6 mengharuskan Anda mengonfigurasi aturan firewall izin masuk yang berlaku untuk pengirim VM Compute Engine – satu aturan untuk mengizinkan masuk ICMP, dan, untuk VM dual-stack, aturan lain untuk mengizinkan masuk ICMPv6. - Jika bit
DFpaket tidak ditetapkan, dan gateway Cloud VPN serta paket melebihi MTU payload, gateway Cloud VPN akan mencoba mengirimkan paket. Paket mungkin dihapus oleh hop berikutnya setelah tunnel Cloud VPN jika paket terlalu besar untuk next hop.
- Jika bit
Untuk informasi umum tentang cara protokol menangani MTU yang tidak cocok, lihat MTU yang tidak cocok, MSS clamping, penemuan MTU jalur dalam dokumentasi MTU VPC.
MTU gateway versus MTU payload
Cloud VPN membedakan antara MTU gateway Cloud VPN dan MTU payload Cloud VPN. MTU gateway Cloud VPN adalah:
- 1460 byte, untuk tunnel Cloud VPN
- 1.440 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect
Konfigurasikan gateway VPN peer Anda untuk menggunakan MTU yang cocok dengan MTU gateway Cloud VPN yang sesuai.
MTU payload untuk tunnel Cloud VPN bergantung pada cipher yang digunakan oleh tunnel dan apakah gateway menggunakan antarmuka IPv4 atau IPv6. Untuk mengetahui informasi selengkapnya, lihat Nilai MTU payload Cloud VPN.
MTU di gateway VPN HA dengan antarmuka IPv6
MTU gateway sama di gateway VPN dengan ketersediaan tinggi (HA) dengan antarmuka IPv6 dan gateway VPN dengan ketersediaan tinggi (HA) dengan antarmuka IPv4. Namun, karena header IPv6 lebih besar dari header IPv4, MTU payload gateway dengan antarmuka IPv6 selalu 20 byte lebih kecil dari MTU payload untuk gateway VPN dengan ketersediaan tinggi (HA) yang sama dan memiliki alamat IPv4.
Misalnya, gateway VPN HA dengan antarmuka IPv4 yang menggunakan cipher non-AEAD memiliki MTU gateway 1460 byte dan MTU payload 1406 byte. Sedangkan, gateway VPN dengan ketersediaan tinggi (HA) dengan antarmuka IPv6 yang menggunakan cipher non-AEAD memiliki MTU gateway 1440 byte dan MTU payload 1386 byte.
Untuk informasi selengkapnya, lihat Unit transmisi maksimum.
Nilai MTU payload Cloud VPN
MTU payload Cloud VPN bergantung pada cipher yang dipilih di koneksi Cloud VPN Anda.
MTU payload untuk cipher AEAD
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher non-AEAD yang memiliki MTU payload Cloud VPN sebesar:
- 1406 byte, untuk tunnel Cloud VPN
- 1.386 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv4
- 1.366 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv6
| Fase 1 | Fase 2 |
|---|---|
| AES-GCM-16-128 | AES-GCM-16-128 |
| AES-GCM-16-192 | AES-GCM-16-192 |
| AES-GCM-16-256 | AES-GCM-16-256 |
| AES-GCM-16-128 | AES-GCM-16-192 |
| AES-GCM-16-192 | AES-GCM-16-128 |
| AES-GCM-16-256 | AES-GCM-16-192 |
| AES-GCM-16-128 | AES-GCM-16-256 |
| AES-GCM-16-192 | AES-GCM-16-256 |
| AES-GCM-16-256 | AES-GCM-16-128 |
MTU payload untuk cipher non-AEAD
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher non-AEAD yang memiliki MTU payload Cloud VPN sebesar:
- 1.374 byte, untuk tunnel Cloud VPN
- 1.354 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv4
- 1334 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv6
| Fase 1 - Enkripsi | Fase 1 - Integritas | Fase 2 - Enkripsi | Fase 2 - Integritas |
|---|---|---|---|
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-512-256 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-512-256 |
Tabel berikut menunjukkan kombinasi cipher fase 1 dan fase 2 untuk cipher non-AEAD yang memiliki MTU payload Cloud VPN sebesar:
- 1.390 byte, untuk tunnel Cloud VPN
- 1370 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv4
- 1.350 byte, untuk VPN dengan ketersediaan tinggi (HA) melalui Cloud Interconnect dengan antarmuka IPv6
| Fase 1 - Enkripsi | Fase 1 - Integritas | Fase 2 - Enkripsi | Fase 2 - Integritas |
|---|---|---|---|
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-128 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-192 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| AES-CBC-256 | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-XCBC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | AES-CMAC-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA1-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-MD5-96 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA256-128 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA384-192 | AES-CBC-256 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-128 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-192 | HMAC-SHA1-96 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA2-256-128 |
| 3DES-CBC | HMAC-SHA512-256 | AES-CBC-256 | HMAC-SHA1-96 |
Langkah selanjutnya
- Untuk mempelajari konsep dasar Cloud VPN, lihat ringkasan Cloud VPN.
- Untuk membantu memecahkan masalah umum yang mungkin Anda temui saat menggunakan Cloud VPN, lihat Pemecahan masalah.