Cisco Asa ISAKMP Phase1

ISAKMP policy

ciscoasa(config)# crypto isakmp policy 10

Authentifizierung mit PSK

• ciscoasa(config-ikev1-policy)# authentication pre-share

Verschlüsselung

• ciscoasa(config-ikev1-policy)# encryption aes-256

Hash Algorithmus

• ciscoasa(config-ikev1-policy)# hash md5

Diffie-Hellmann-Gruppe

• ciscoasa(config-ikev1-policy)# group 5

Lifetime

• ciscoasa(config-ikev1-policy)# lifetime 28800

Enables ISAKMP on the interface if-outside

• ciscoasa(config)# crypto ikev1 enable ifoutside