Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Rich_Ziga
New Contributor

newbie needing assitance with Cisco ASA VPN conversion

I created my first conversion and I noticed that perhaps I may have missed a step in the conversion process? 

 

It seems that Fortigate configuration does not allow for the several policies and just uses the first one for every VPN,  did I miss something?  Thanks for any help.

Rich

 

isakmp policy 1 authentication pre-share
isakmp policy 1 encryption 3des
isakmp policy 1 hash md5
isakmp policy 1 group 1
isakmp policy 1 lifetime 1000
isakmp policy 5 authentication pre-share
isakmp policy 5 encryption 3des
isakmp policy 5 hash sha
isakmp policy 5 group 2
isakmp policy 5 lifetime 86400 <<<<<<<<<<<<<<<<<<<<<<<<these are not used
isakmp policy 6 authentication pre-share
isakmp policy 6 encryption 3des
isakmp policy 6 hash sha
isakmp policy 6 group 2
isakmp policy 6 lifetime 3600 <<<<<<<<<<<<<<<<<<<<<<<<these are not used

config vpn ipsec phase1-interface
edit "vpn_1"
set type static
set remote-gw X.X.X.X
set authmethod psk
# Warning: please reset the pre-shared key.
set psksecret "XXXXXXXX"
set dhgrp 1 2 5
set mode main
set proposal 3des-md5 aes256-sha1 des-md5 aes192-sha1 aes128-sha1 3des-sha1
set interface GigabitEthernet0/0
set keylife 1000
 next
edit "vpn_101"
set type static
set remote-gw x.x.x.x
set authmethod psk
# Warning: please reset the pre-shared key.
set psksecret "xxxxxxx"
set dhgrp 1 2 5
set mode main
set proposal 3des-md5 aes256-sha1 des-md5 aes192-sha1 aes128-sha1 3des-sha1
set interface GigabitEthernet0/0
set keylife 1000
next
 
0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors