Better Static to Dynamic Site to Site IKEv2 tunnel configuration example

[Adam Hudson]

I'm setting up a site to site VPN from my 5506 to my 5520. The 5506 will be served a dynamic address while my 5520 has a static IP. I was looking for guides and came across this: IKEv1 Guide

It's nice and comprehensive and shows the steps through the ASDM, unfortunately it's only for IKEv1. Doing more searching I found this guide for IKEv2: IKEv2

Unfortunately, it's not comprehensive (meaning it doesn't explain the commands) and it doesn't show the steps through the ASDM. What I'm looking for is a comprehensive guide like the first link, but for IKEv2, can anyone help me?

[mrsethi]

Hi Adam,

Please refer the below two links, they are for IKEv2 configuration.

The first  link guides how to  configure the Dynamic Crypto Map section(need to do on the device which will have a static public ip):

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118652-configure-asa-00.html

The second link guides how to configure the Static Crypto Map section(need to do on the device which will get dynamic ip)

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115935-asa-ikev2-debugs.html

Please let me know if you have any queries, I will try my best to answer them.

Regards,

Mrutunjay Sethi