help with a vpn site to site configuration

RouterOS General
1

Hi guys, I have a situation that requires a site 2 site vpn.
The other side is a fortinet with the following configuration.
I just need to know if I would be able to configure a connection from a MTik using the fortinet configuration.
It is not possible to change any configuration on the fortinet..
It looks like maybe but I dont know what the DH group 20 and Perfect Forward Secrecy is in MTik speak

Thanks..

This is the config on the Fortinet:

Authentication method Shared Secret
Key Exchange encryption AES 256
Data Integrity SHA 384
diffie-Hellman group (phase 1) Group 20
Timer IKE phase 1 28800
Use aggressive mode No

IPSEC parameters
(Phase 2)
IPSEC ESP
Data Integrity AES 256 gcm
Perfect Forward Secrecy Yes
Diffie-Hellman group Group 20
Timer IKE phase 2 3600 sec

2

Google helps you translate the numeric codes of the DH groups to the actual cryptographic transforms used, e.g. https://www.omnisecu.com/tcpip/what-is-diffie-hellman-group.php.

Mikrotik uses strings expressing the transform function names instead, so in /ip ipsec profile (Phase 1 proposal) you set dh-group=ecp384, and in /ip ipsec proposal (Phase 2 proposal) you set pfs-group=ecp384 to express both Yes and Group 20 in a single item.