Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA versions vs phase1 policy statements

I have two diff. Pix 5510's that show diff crypto isakmp statements for creating crytpo tunnels. The statements are slightly different for the current version of IOS used. Wondering if the diff vers of IOS causes the obvious difference in statements?? ASA info follows:

#1) ASA 5510 vers 7.0(6) with this config >>

isakmp enable outside

isakmp enable inside

isakmp policy 1 authentication pre-share

isakmp policy 1 encryption aes

isakmp policy 1 hash md5

isakmp policy 1 group 2

isakmp policy 1 lifetime 86400

#2) ASA vers 7.2(1)24 with this config >>

crypto isakmp identity address

crypto isakmp enable inside

crypto isakmp policy 1

authentication pre-share

encryption 3des

hash sha

group 2

lifetime 86400

crypto isakmp nat-traversal 20

2 REPLIES
New Member

Re: ASA versions vs phase1 policy statements

I think it is because of different software version on your devices.

Following link may help you

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f0e2.html#wp2051661

Note: In the given link, in command history section it is mentioned "The crypto isakmp enable command replaces the isakmp enable command".

New Member

Re: ASA versions vs phase1 policy statements

yes, thank you...

227
Views
0
Helpful
2
Replies