Question: how pfs works in ipsec?
Answer: PFS stands for Perfect Forward Secrecy, and it's also known simply as Forward Secrecy (FS). It's an encryption style that revolves around a temporary Private Key (the key used to decrypt encrypted data) being produced in VPN client and VPN server communications for each session.