topic Enabling IKEv1 & IKEv2 in Network Security

Enabling IKEv1 & IKEv2

Terence Lockette — Tue, 12 Mar 2019 01:38:25 GMT

Hello all,

I was wondering if it's possible to enable both versions of IKE (v1 & v2) on the outside interface of the ASA so that I can terminate L2L tunnels according to the specified policies? If so, will enabling the one while the other is already turned on cause current VPN tunnels to drop and reconnect? Currently, we have IKEv1 enabled on the outside interface and I want to turn on IKEv2 but don't want to interrupt the current L2L tunnels. Thanks!

Terence

Enabling IKEv1 & IKEv2

rkumar5 — Sun, 05 May 2013 06:57:52 GMT

Hi Terence,

IKEV1 and IKEV2 both can be enabled on the same interface at the same time

crypto ikev2 enable outside 
crypto ikev1 enable outside

This will not interrupt the other L2L tunnels

Thanks

Raj