Cisco Asa ISAKMP Phase1

ISAKMP policy

ciscoasa(config)# crypto ikev1 policy 10

Authentifizierung mit PSK

• ciscoasa(config-ikev1-policy)# authentication pre-share

Verschlüsselung

• ciscoasa(config-ikev1-policy)# encryption aes-256

Hash Algorithmus

• ciscoasa(config-ikev1-policy)# hash md5

Diffie-Hellmann-Gruppe

Muss beim Remote Access auf Gruppe 2 stehen

• ciscoasa(config-ikev1-policy)# group 2

Lifetime

• ciscoasa(config-ikev1-policy)# lifetime 28800

Enables ISAKMP on the interface if-outside

• ciscoasa(config)# crypto ikev1 enable if-outside

Copy and Paste

configure terminal
crypto ikev1 policy 10
authentication pre-share
encryption aes-256
hash md5
group 2
lifetime 28800
crypto ikev1 enable if-outside