https://vlan51.com/tags/cisco/Recent content in Cisco on vlan51Hugoen-gbMon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/comware-v5/ipsec-vpn-cisco-asa-msr935/Mon, 01 Jan 2024 00:00:00 +0000https://vlan51.com/comware-v5/ipsec-vpn-cisco-asa-msr935/<p>Full site-to-site IKEv1 IPsec VPN configuration between a Cisco ASA and an HP MSR935 (Comware v5).</p> <figure> <a href="https://vlan51.com/images/ipsec-vpn-asa-msr935-topology.png" target="_blank" rel="noopener"><img src="https://vlan51.com/images/ipsec-vpn-asa-msr935-topology.png" alt="IPsec VPN topology — Cisco ASA to HP MSR935" loading="lazy" decoding="async"></a><figcaption>IPsec VPN topology — Cisco ASA to HP MSR935</figcaption> </figure> <p><strong>Tested versions:</strong> Cisco ASA 9.1(2), HP MSR935 Comware 5.20.106 Release 2513P09</p> <p><strong>Addressing:</strong> ASA WAN <code>89.89.89.89</code>, MSR WAN <code>99.99.99.99</code>, ASA LAN <code>10.0.0.0/24</code>, MSR LAN <code>192.168.10.0/24</code></p> <h2 id="phase-1--ike">Phase 1 — IKE <a class="anchor" href="#phase-1--ike" aria-label="Link to this section">#</a></h2> <p><strong>ASA:</strong></p> <div class="code"> <div class="code-bar"><span>cli</span><button class="copy" type="button" aria-label="Copy to clipboard">Copy</button></div><pre><code>crypto ikev1 policy 5 authentication pre-share encryption aes-192 hash sha group 2 lifetime 3600 group-policy GroupPolicy_99.99.99.99 internal group-policy GroupPolicy_99.99.99.99 attributes vpn-tunnel-protocol ikev1 tunnel-group 99.99.99.99 type ipsec-l2l tunnel-group 99.99.99.99 general-attributes default-group-policy GroupPolicy_99.99.99.99 tunnel-group 99.99.99.99 ipsec-attributes ikev1 pre-shared-key YOUR-PSK-HERE</code></pre></div> <p><strong>MSR935:</strong></p>