04-05-2017 07:25 AM
Are IKEV1 and ISAKMP compatibly policies to create an SA. I have ASAs in the field that have the Crypto Policy ISAKMP running and are actively peering to a FW that has IKEV1 policies . I understand IKE and and its relationship to ISAKMP but if there is no difference, why are there the different options under the "config crypto policy" ? Thoughts?
Thank you,
Nathan
Solved! Go to Solution.
04-10-2017 10:15 PM
ISAKMP phase 1 uses IKE and it can be IKEv1 or IKE v2. You have option to configure multiple option so that you can create multiple negotiation profile . During negotiation these policies are matches in sequence.
Hope this helps.
Ajay
04-10-2017 10:15 PM
ISAKMP phase 1 uses IKE and it can be IKEv1 or IKE v2. You have option to configure multiple option so that you can create multiple negotiation profile . During negotiation these policies are matches in sequence.
Hope this helps.
Ajay
05-10-2017 07:51 PM
Yes that makes sense. Thank you
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide