See the following Cisco Support document that shows how to do this with examples. Important that you likely need to follow the directions to use `clear connection address ...` to force the ASA to re-evaluate IKE/isakmp connection attempts from the ad...

Any luck with the TAC case? 03.11.09 is unusable with this SSH bug.