IPSEC tunnel on virtual context of cisco asa 5585

[Mohd Imtiaz Hussain]

In cisco ASA 5585 firewall context tunnel-group name ipsec-attribute command is not supported. Can any some one let me know how to add preshared key for IP sec tunnl

[Karsten Iwen]

Which ASA-version are you running?You need at least 9.0(1).

[johnlloyd_13]

hi,

are you running IKEv1 or v2?

just add the IKE version keyword.

see sample below:

ciscoasa(config)# tunnel-group 1.2.3.4 ipsec-attributes
ciscoasa(config-tunnel-ipsec)# ?

tunnel-group configuration commands:
  chain             Enable sending certificate chain
  exit              Exit from tunnel-group IPSec attribute configuration mode
  help              Help for tunnel group configuration commands
  ikev1             Configure IKEv1
  ikev2             Configure IKEv2
  isakmp            Configure ISAKMP policy
  no                Remove an attribute value pair
  peer-id-validate  Validate identity of the peer using the peer's certificate
ciscoasa(config-tunnel-ipsec)# ikev1 pre-shared-key ?

tunnel-group-ipsec mode commands/options:
  0                Specifies an UNENCRYPTED password will follow
  8                Specifies an ENCRYPTED password will follow
  WORD < 129 char  Enter an alphanumeric string between 1-128 characters
ciscoasa(config-tunnel-ipsec)# ikev1 pre-shared-key cisco