> # About Perfect Forward Secrecy

> To specify SA lifetime negotiation values, you can also optionally configure the perfect forward secrecy (PFS) value in the crypto map.

> The PFS feature is disabled by default. If you set the PFS group, you can set one of the DH groups: 1, 2, 5, or 14. If you do not specify a DH group, the software uses group 1 by default.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.