Site-to-Site VPN to Cisco ASA with IKEv2

Geert_m · ‎03-15-2024

Hello,

I have a question with setting up an IPSec tunnel using IKEv2. In the FortiGate only one PSK needs to be specified. But in the Cisco ASA wizard I need to specify two PSK's. One from the local Cisco ASA and from the remote (FortiGate). How do I need to configure this, do I need to only add one PSK to the Cisco ASA, or is there an other solution?

kind regards,

Geert

ozkanaltas · ‎03-15-2024

Hello @Geert_m ,

You can configure the remote psk via CLI.

Also, you can review this community discussion.

https://community.fortinet.com/t5/Support-Forum/Set-two-different-psk-ikev2/td-p/65334

config vpn ipsec phase1-interface
edit <VPN_NAME>
set authmethod-remote psk
set psksecret-remote <YOUR_PSK_KEY>
next
end

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW

View solution in original post

ozkanaltas · ‎03-15-2024

Hello @Geert_m ,

You can configure the remote psk via CLI.

Also, you can review this community discussion.

https://community.fortinet.com/t5/Support-Forum/Set-two-different-psk-ikev2/td-p/65334

config vpn ipsec phase1-interface
edit <VPN_NAME>
set authmethod-remote psk
set psksecret-remote <YOUR_PSK_KEY>
next
end

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW