https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731529#M11635 Hi,<BR />SHA2 is not supported when using IKEv1 on the ASA. You'd need to use IKEv2 in order to use the latest/strongest algorithms.<BR /><BR />HTH Wed, 24 Oct 2018 11:23:05 GMT Rob Ingram 2018-10-24T11:23:05Z https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731516#M11634 <P>Hi</P> <P>Anyone who can explain to me while below section 1 fails whereas section 2 goes through without any issues? The error I get is:&nbsp;(ERROR) Sent (Wed Oct 24 12:18:45 CEST 2018): crypto ipsec ikev1 transform-set aes_sha2 esp-aes-256 esp-sha256-hmac Received (Wed Oct 24 12:18:46 CEST 2018): crypto ipsec ikev1 transform-set aes_sha2 esp-aes-256 esp-sha256-hmac<BR /> ^<BR />ERROR: % Invalid input detected at '^' marker.&nbsp;</P> <P>Cisco ASA 5516x</P> <P>&nbsp;</P> <P>Failing:</P> <P>crypto ipsec ikev1 transform-set aes_sha esp-aes-256 esp-sha-hmac <BR />crypto ipsec ikev1 transform-set aes_md5 esp-aes-256 esp-md5-hmac <BR /><EM><STRONG>crypto ipsec ikev1 transform-set aes_sha2 esp-aes-256 esp-sha256-hmac</STRONG></EM><BR />crypto ipsec ikev1 transform-set 3des_md5 esp-3des esp-md5-hmac <BR />crypto ipsec ikev1 transform-set 3des_sha esp-3des esp-sha-hmac</P> <P>&nbsp;</P> <P>Success:</P> <P>crypto ipsec ikev1 transform-set aes_sha esp-aes-256 esp-sha-hmac <BR />crypto ipsec ikev1 transform-set aes_md5 esp-aes-256 esp-md5-hmac <BR />crypto ipsec ikev1 transform-set 3des_md5 esp-3des esp-md5-hmac <BR />crypto ipsec ikev1 transform-set 3des_sha esp-3des esp-sha-hmac</P> Fri, 21 Feb 2020 16:23:27 GMT https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731516#M11634 av 2020-02-21T16:23:27Z https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731529#M11635 Hi,<BR />SHA2 is not supported when using IKEv1 on the ASA. You'd need to use IKEv2 in order to use the latest/strongest algorithms.<BR /><BR />HTH Wed, 24 Oct 2018 11:23:05 GMT https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731529#M11635 Rob Ingram 2018-10-24T11:23:05Z https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731553#M11636 <P>That explains it. Thanks.</P> Wed, 24 Oct 2018 11:42:55 GMT https://community.cisco.com/t5/network-security/ikev1-transform-set-issue/m-p/3731553#M11636 av 2018-10-24T11:42:55Z