Aggressive Mode Disable

[Nub65]

Hello,

We were suggested to disable isakmp Aggressive mode on Cisco Routers and on ASAs due to vulnerability reaso.

How will disabling this affect on current VPN connections on these devices?

[Deepak Kumar]

Hi,

You can use the command "crypto isakmp aggressive-mode disable".

[Nub65]

Thank you for the replay.

My main concern is what happens to current VPN connections after disabling aggressive-mode.

[Deepak Kumar]

Hi,

VPN will disconnect during the next key renew time and VPN will try with main mode.