Pre-shared key on ASA

Waterbird — Fri, 21 Feb 2020 16:33:28 GMT

Hello. I'm trying to understand the command for configuring a pre-shared key on a ASA 5506-X.

So far, I've already configured my IKE Phase 1 ISAKMP policy on an ASA. I selected the pre-share option for authentication.

However, the #crypto isakmp policy 1 command was not available for some unknown reason, so I used #crypto ikev1 policy 1 instead.

The next step, in my understanding for routers at least, is if using pre-share option, I should configure this:

#crypto isakmp key cisco12345 address 172.30.2.2 (peer router ip address)

However, I'm on an ASA not a router, not a router, and as mentioned the usual crypto isakmp policy command is gone, but there was a cyrpto ikev1 policy command I used instead.

So given all of the above, what is the command I should use to configure the pre-shared key on the ASA?

Re: Pre-shared key on ASA

Rob Ingram — Mon, 10 Dec 2018 19:12:51 GMT

Hi,
You would define the IKEv1 pre-shared key under the tunnel group, e.g:-

tunnel-group 1.1.1.1 type ipsec-l2l
tunnel-group 1.1.1.1 ipsec-attributes
ikev1 pre-shared-key Cisco1234

HTH

topic Re: Pre-shared key on ASA in Network Security

Pre-shared key on ASA

Re: Pre-shared key on ASA