Configuring new ASA 5545x for VPN

[Steve Coady]

The ASA has an IOS disk0:/asa911-smp-k8.bin.

In the process of reconfiguring the Crypto map and tunnel groups I am now give the keyword of iKev1 or iKev2.

I envision the ikev2 as being more secure but would like some clarification and guidance on which to choose and why?

Please advise at your earliest convenience.

[Marvin Rhoads · Accepted solution]

IKEv2 is in most respects superior. Both ends must have the code level to support it - that's about the only downside.

There are some good tips and guidance on why IKEv2 may be your best choice in this TAC document.

[Steve Coady]

Marvin

Thank you for the response.