Cisco Firepower 2130 site to site vpn features

[faghouri83]

Hi

I am about to set up some  site to site vpns on Cisco firepower 2130 firewalls that will be managed by an FMC. 

I would just like to know if they support: 

IKEv2 with aes256, sha256 and DH14

Reason i'm asking is because i dont believe the firepowers are as feature rich as the ASA's yet am i right? 

Thanks

[Rob Ingram · Accepted solution]

HI,
Yes, FTD running 6.2.3.x will support IKEv2 with those algorthims you've listed and even support stronger algorithms, e.g. AES-GCM. You can configured P2P, Hub and Spoke or Full Mesh topologies, so Site to Site VPN topologies are on par with ASA afaik.

HTH

[faghouri83]

thanks for the swift reply :-)