cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
432
Views
0
Helpful
2
Replies

ASA versions vs phase1 policy statements

dgalati000
Level 1
Level 1

I have two diff. Pix 5510's that show diff crypto isakmp statements for creating crytpo tunnels. The statements are slightly different for the current version of IOS used. Wondering if the diff vers of IOS causes the obvious difference in statements?? ASA info follows:

#1) ASA 5510 vers 7.0(6) with this config >>

isakmp enable outside

isakmp enable inside

isakmp policy 1 authentication pre-share

isakmp policy 1 encryption aes

isakmp policy 1 hash md5

isakmp policy 1 group 2

isakmp policy 1 lifetime 86400

#2) ASA vers 7.2(1)24 with this config >>

crypto isakmp identity address

crypto isakmp enable inside

crypto isakmp policy 1

authentication pre-share

encryption 3des

hash sha

group 2

lifetime 86400

crypto isakmp nat-traversal 20

2 Replies 2

bwalchez
Level 4
Level 4

I think it is because of different software version on your devices.

Following link may help you

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f0e2.html#wp2051661

Note: In the given link, in command history section it is mentioned "The crypto isakmp enable command replaces the isakmp enable command".

yes, thank you...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card