ASDM

[amjadkhan1920]

Dear all,

something is string for me once i make changes or make new ipsec tunnel its working fine but the parameter for other which is already exist also changed automatically ,

i attached the picture once i make the new one automatically changed for existing one and make problem for me while the priory is different 

IKE V1  policy 

[Rob Ingram]

Hi,
You should change the "DH Group" to "5" on ikev1 policy 72. You can also change the priority to less than 70 so it would be processed before the existing ikev1 policy 70...in order to match the other ASA.

HTH

[amjadkhan1920]

dear sir,

yes i do this but i have more than 20 ipsec once you make new ipsec and keep the priority is efferent from existing so it effect my 3 or 4 another site

[Rob Ingram · Accepted solution]

If you are saying if you make that change it causes issues with other VPNs, then just create a new IKEv1 policy with the correct settings.