IKEv1 & IKEv2

[IT_-_Department]

                   I have a 2821 Router with several IPSec Tunnels on it.  I would like to replace this with a ASA 5510.  My hope is to swap these out with minimal impact on the active Tunnels.  I have the details of each Tunnel well documented.  My question or concern is in configuring the Tunnels on the ASA.  Do I need to configure IKE proposals in just IKEv1?  If I use IKEv2, my concern is that there will be compatibility issues with the remote end of the Tunnels, or is IKEv2 functional with IKEv1?  If not, then, do I just configure everything in IKEv1 and ignore IKEv2?

Thank you in advance for any insight offered.

[Javier Portuguez · Accepted solution]

Dear Eric,

Both ends need to be configured for the same IKE version.

So, you may want to ignore the IKEv2 settings, even to uncheck the option to "enable" IKEv2 in the connection profile.

HTH.

Portu.

Please rate any helpful posts