topic Re: IKE V2 Question in Network Security

IKE V2 Question

carl_townshend — Mon, 07 Sep 2020 14:34:57 GMT

Hi All

With IKE V2

I believe it still has a phase and phase 2 proposal (init and auth)

On the ASA, is the ike policy the phase 1 and the ipsec proposal phase 2 for ike v2?

cheers

Re: IKE V2 Question

Rob Ingram — Mon, 07 Sep 2020 16:51:33 GMT

Hi,

Yes. The IKEv2 policy is used to establish the IKEv2 SA (INIT/Phase 1) and the IPSec Proposal (Transform Set) is used to establish the IPSec SA (AUTH/Phase 2).

HTH

Re: IKE V2 Question

Ruben Cocheno — Wed, 09 Sep 2020 00:17:03 GMT

@carl_townshend

yes, that's right. For stability aand security reasons, prefer IKEv2 hiwhc is supported across all vendors as today.