Hi Jafar, > No need to configure a prf, it is already assumed when you > configured a DH group; so you can drop prfsha256. Small correction, the PRF algorithm, if not configured explicitly, is not derived from the DH group, but the integrity algorithm, in this case sha256. Regards, Tobias