IKE V2 Question

[carl_townshend]

Hi All

With IKE V2

I believe it still has a phase and phase 2 proposal (init and auth)

On the ASA, is the ike policy the phase 1 and the ipsec proposal phase 2 for ike v2?

cheers

[Rob Ingram]

Hi,

Yes. The IKEv2 policy is used to establish the IKEv2 SA (INIT/Phase 1) and the IPSec Proposal (Transform Set) is used to establish the IPSec SA (AUTH/Phase 2).

HTH

[Ruben Cocheno]

@carl_townshend 

yes, that's right. For stability aand security reasons, prefer IKEv2 hiwhc is supported across all vendors as today.