topic Re: VPN setup command query? in Network Security https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293304#M788020 <HTML><HEAD></HEAD><BODY><P>Dan</P><P></P><P>They do the same thing. The isakmp policy commands have been replaced with the crypto isakmp policy commands - </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/c5.html#wp2191760" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/c5.html#wp2191760</A></P><P></P><P>Jon</P></BODY></HTML> Wed, 07 Oct 2009 15:05:18 GMT Jon Marshall 2009-10-07T15:05:18Z VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293303#M788019 <P>Hi,</P><P></P><P>I've noticed two set of commands on my asa 5520:</P><P></P><P>One states: "isakmp policy"</P><P>and the other states: "crypto isakmp policy"</P><P></P><P>Can someone please explain why there are two sets and what the difference is, and when would you use one over the other?</P><P></P><P>Thanks</P><P>Dan </P> Mon, 11 Mar 2019 16:23:59 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293303#M788019 dan_track 2019-03-11T16:23:59Z Re: VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293304#M788020 <HTML><HEAD></HEAD><BODY><P>Dan</P><P></P><P>They do the same thing. The isakmp policy commands have been replaced with the crypto isakmp policy commands - </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/c5.html#wp2191760" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/c5.html#wp2191760</A></P><P></P><P>Jon</P></BODY></HTML> Wed, 07 Oct 2009 15:05:18 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293304#M788020 Jon Marshall 2009-10-07T15:05:18Z Re: VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293305#M788021 <HTML><HEAD></HEAD><BODY><P>Dan-</P><P></P><P>There is no difference between the two.</P><P></P><P><CODE>ASA1(config)# isakmp ?</CODE></P><P></P><P>configure mode commands/options:</P><P> am-disable Disable inbound aggressive mode connections</P><P> client Set client configuration policy (DEPRECATED - see 'help</P><P> isakmp')</P><P> disconnect-notify Enable disconnect notification to peers</P><P> enable Enable ISAKMP on the specified interface</P><P> identity Set identity type (address, hostname or key-id)</P><P> ipsec-over-tcp Enable and configure IPSec over TCP</P><P> keepalive Set keepalive interval (DEPRECATED - see 'help isakmp')</P><P> key Set pre-shared key for remote peer (DEPRECATED - see 'help</P><P> isakmp')</P><P> nat-traversal Enable and configure nat-traversal</P><P> peer Set xauth and config mode exemption for the specified peer</P><P> (DEPRECATED - see 'help isakmp')</P><P> policy Set ISAKMP policy suite</P><P> reload-wait Wait for voluntary termination of existing connections</P><P> before reboot</P><P></P><P>ASA1(config)# crypto isakmp ?</P><P></P><P>configure mode commands/options:</P><P> am-disable Disable inbound aggressive mode connections</P><P> client Set client configuration policy (DEPRECATED - see 'help</P><P> isakmp')</P><P> disconnect-notify Enable disconnect notification to peers</P><P> enable Enable ISAKMP on the specified interface</P><P> identity Set identity type (address, hostname or key-id)</P><P> ipsec-over-tcp Enable and configure IPSec over TCP</P><P> keepalive Set keepalive interval (DEPRECATED - see 'help isakmp')</P><P> key Set pre-shared key for remote peer (DEPRECATED - see 'help</P><P> isakmp')</P><P> nat-traversal Enable and configure nat-traversal</P><P> peer Set xauth and config mode exemption for the specified peer</P><P> (DEPRECATED - see 'help isakmp')</P><P> policy Set ISAKMP policy suite</P><P> reload-wait Wait for voluntary termination of existing connections</P><P> before reboot</P><P></P><P>"iskamp policy" is left over from the 6.x code, I have to assume for backwards compatibility.</P><P></P><P>Hope that helps.</P><P></P></BODY></HTML> Wed, 07 Oct 2009 15:11:32 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293305#M788021 Collin Clark 2009-10-07T15:11:32Z Re: VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293306#M788022 <HTML><HEAD></HEAD><BODY><P>Sorry for the hijacking Jon, you're still quicker than I am.</P></BODY></HTML> Wed, 07 Oct 2009 15:18:12 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293306#M788022 Collin Clark 2009-10-07T15:18:12Z Re: VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293307#M788023 <HTML><HEAD></HEAD><BODY><P>Collin</P><P></P><P>No need to apologize, i've done it to you before.</P><P></P><P>Key thing is that we both agree <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>Jon</P></BODY></HTML> Wed, 07 Oct 2009 15:21:45 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293307#M788023 Jon Marshall 2009-10-07T15:21:45Z Re: VPN setup command query? https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293308#M788024 <HTML><HEAD></HEAD><BODY><P>Im not hijacking here just commenting - the more additional info the better </P></BODY></HTML> Wed, 07 Oct 2009 15:29:49 GMT https://community.cisco.com/t5/network-security/vpn-setup-command-query/m-p/1293308#M788024 JORGE RODRIGUEZ 2009-10-07T15:29:49Z