What is the best way to ensure our ASA site to site VPN to another ASA is using NGE to protect the data?
When issuing the sh vpn-sessiondb l2l command we get the following:
Session Type: LAN-to-LAN
Connection : x.x.x.x
Index : 8075 ...
Great, thanks, how does this look?We are concerned about the "none" in the 7th line Hashing .................................IPsecOverNatT: (1)nonewvdob-asa# sh vpn-sessiondb detail l2lSession Type: LAN-to-LAN DetailedConnection : x.x.x.xIndex ...
Thanks for the information. Very helpful. Does this now look appropriate?wvdob-asa# sh vpn-sessiondb detail l2lSession Type: LAN-to-LAN DetailedConnection : x.x.x.xIndex : 8100 IP Addr : x.x.x.xProtocol : IKEv2 IPs...