Pre-shared key on ASA

[Waterbird]

Hello. I'm trying to understand the command for configuring a pre-shared key on a ASA 5506-X.

So far, I've already configured my IKE Phase 1 ISAKMP policy on an ASA.  I selected the pre-share option for authentication.  

However, the  #crypto isakmp policy 1 command was not available for some unknown reason, so I used #crypto ikev1 policy 1 instead. 

The next step, in my understanding for routers at least, is if using pre-share option, I should configure this:

#crypto isakmp key cisco12345 address 172.30.2.2 (peer router ip address)

However, I'm on an ASA not a router, not a router, and as mentioned the usual crypto isakmp policy command is gone, but there was a cyrpto ikev1 policy command I used instead.

So given all of the above, what is the command I should use to configure the pre-shared key on the ASA?

[Rob Ingram · Accepted solution]

Hi,
You would define the IKEv1 pre-shared key under the tunnel group, e.g:-

tunnel-group 1.1.1.1 type ipsec-l2l
tunnel-group 1.1.1.1 ipsec-attributes
ikev1 pre-shared-key Cisco1234

HTH