Site-to-Site VPN and AnyConnect VPN on the same device using IKEv2

[chris_compton_asg]

Hello All,

I have 2 ASA5505's connected through a site-to-site using IKEv1 and IKEv2.

Recently, I ran through the wizard to configure the AnyConnect software which looks like it changed my IKEv2 from:

>> crypto ikev2 enable outside

to

>> crypto ikev2 enable outside client-services port 443

>> crypto ikev2 remote-access trustpoint TrustPoint0

Now, my site-to-site connection will only come up using IKEv1.

Is there a way to have both the Site-to-Site and the AnyConnect VPN connections use IKEv2?

[rizwanr74]

Sure you can change them, please follow the example below, please try this off production hours.

group-policy your-group-name attributes

vpn-tunnel-protocol ikev2

tunnel-group 204.x.x.x ipsec-attributes

ikev2 pre-shared-key *

Hope that helps.

thanks