Backward Compatibility

Thaw_Zin_Myo · July 20, 2018, 12:27am

I have Head and Spoke network. Spoke(terminal) sites appear starting in VPN connection when HQ(Balance 2500) site appears established. I checked the terminal site again but it is starting. What is this problem? HQ uses “Restricted” in PepVPN setting and terminals configure by default. Is it need to be the same setting? And I don’t understand Backward Compatibility in Peplink. Explain to me!!! How many have TLS versions and where firmware versions? How do they work? Thanks for all

TK_Liew · July 23, 2018, 2:07am

Backward Compatible
High (default) - Ensure the hub and spoke devices are using v6.1.x and above. This supports TLS v1.0.
Restricted - Ensure the hub and spoke devices are using v6.2.x and above. This supports TLS v1.2.

Thaw_Zin_Myo · July 23, 2018, 9:06pm

Is it necessary to same on both sites? How is it work? Where do it need?

TK_Liew · July 23, 2018, 11:30pm

I will advise not to make any changes on this if you are not familiar. Unless TLS v1.2 is needed in your environment. If this is needed in your environment, please ensure all hub and spoke devices support v6.2.x and above. Then configure “Restricted” at all the devices.

Thaw_Zin_Myo · July 24, 2018, 2:02am

Thanks for your support and advice.