Our partner network using checkpoint which support ikev1 with "group 14" . Our ASA doesnt seem like supporting group 14 , it supports group 14 on ikev2 .
I looked into this recently for a customer. The only way that I found to use grop 14 on ASA was to use IKEv2, and that works. If someone does know a way to use group 14 in IKEv1 on ASA I would be interested in knowing it.
The first time that I did this I controlled both devices and I changed both devices to use IKEv2. The other time that I did it I changed our ASA to use IKEv2 on the VPN tunnel and the other end was a non Cisco device controlled by a different company. I have the impression that they changed to IKEv2 also but can not say that for sure. But since the protocols are quite different I do not see how it could work with IKEv1 on one side and IKEv2 on the other side. It seems to me that both sides need to use v1 or both sides need to use v2.
HTH
Rick
HTH
Rick
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
