ASA 5520 with version 8.2(5) SHA-256 on ikeV1

[suaim.latheef]

Hi,

i have an requirement to create site to site vpn with ikeV1 hash SHA-256 with Group - 14 which version of ASA image will support in my ASA 5520?

PHASE  1	Exchange Mode			Main
	Authentication Method			Pre-shared Key
	Encryption			AES-256
	Hash			SHA-256
	Diffie-Hellman Group			Group 14 (2048 bit)
	Lifetime (Seconds)			86400

Suaim.

[Aditya Ganjoo]

Hi,

I do not think ASA supports group 14 for Ikev1.

There is an enhancement filed for the same:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuv51888/?referring_site=bugquickviewredir

Regards,

Aditya

Please rate helpful and mark correct answers

[Karsten Iwen]

You have to move to IKEv2 if you want to use more modern crypto on the ASA. There you could use the above mentioned algorithms for the IKE-SA. But for the IPsec-SAs you still are bound to the legacy crypto. For IKEv2 you have to upgrade your ASA to at least 8.4.

[suaim.latheef]

thanks Karsten.

[Karsten Iwen]

And remember that your ASA version has reached end of SW-Maintenance. You are putting your company at risk if you don't update.

[suaim.latheef]

we are going to replace the device.