Cisco 3660 and Microsoft Azure

[christian.tarifa]

Hi! sorry but my english is no very good.

My question is, the Cisco 3660 is posible VPN tunnel between cisco 3660 and Microsoft Azure?

http://msdn.microsoft.com/en-us/library/azure/jj156075.aspx

IPsec ParametersIKE Phase 1 setup

Property	Static Routing VPN gateway	Dynamic Routing VPN gateway and High Performance VPN gateway
IKE Version	IKEv1	IKEv2
Diffie-Hellman Group	Group 2 (1024 bit)	Group 2 (1024 bit)
Authentication Method	Pre-Shared Key	Pre-Shared Key
Encryption Algorithms	AES256 AES128 3DES	AES256 3DES
Hashing Algorithm	SHA1(SHA128)	SHA1(SHA128)
Phase 1 Security Association (SA) Lifetime (Time)	28,800 seconds	28,800 seconds

IKE Phase 2 setup

Property	Static Routing VPN gateway	Dynamic Routing VPN gateway and High Performance VPN gateway
IKE Version	IKEv1	IKEv2
Hashing Algorithm	SHA1(SHA128)	SHA1(SHA128)
Phase 2 Security Association (SA) Lifetime (Time)	3,600 seconds	-
Phase 2 Security Association (SA) Lifetime (Throughput)	102,400,000 KB	-
IPsec SA Encryption & Authentication Offers (in the order of preference)	ESP-AES256   ESP-AES128   ESP-3DES   N/A	See Dynamic Routing Gateway IPsec Security Association (SA) Offers
Perfect Forward Secrecy (PFS)	No	Yes (DH Group1)
Dead Peer Detection	Not supported	Supported

Thank you!!

Regards.

Christian

[joe19366]

it can do the right Static Routing VPN gateway settings with an enterprise or ipsec capable image;

but the performance may not be what you're looking for.

you can grab an asa 5505 on ebay for $200 - may be your best option for ikev1

-Joe