As promised, this post provides the second part of my experiences using the AnyConnect® 3.0 client with IKE version 2. This research was conducted using an ASA5520 with OS version 8.4(1) and ASDM version 6.4(1). Rather than illustrate a “how to” guide for a successful implementation (which is what I did in Part I), this follow-up will provide troubleshooting and research into an (as-of-yet) unsupported capability of the IKEv2 protocol.

Almost a year ago I posted a two-part series on IKE version 2 about the protocol and some fundamental implementation principles on the Cisco IOS® router. With the announcement toward the end of last year of AnyConnect® Secure Mobility Client version 3.0 along with this year’s availability of ASA OS 8.4 and 8.5, discussion of the security appliance implementation of IKEv2 is timely. Due to the volume of information, I’ll again separate this post into two parts.

In Part One, we focused on the protocol differences between versions 1 and 2 of Internet Key Exchange (with an emphasis on new features introduced in IKEv2). Our emphasis here will be on how version 2 is implemented on the Cisco IOS router. After examining the Configuring Internet Key Exchange Version 2 (IKEv2) RFC, I […]

This post is the result of a “bug in my ear” placed there by a colleague after discussions between fellow instructors.  I will attempt to conduct a brief explanation of the highlights of Internet Key Exchange version 2 (IKE v2). This first part summarizes the enhancements to the protocol; the second part covers its implementation […]