I am trying to set up a site to site tunnel between XG and a Cisco ASA using IKEv2. On the ASA there are 3 separate preshared keys that you are required to set. (In ASDM) on the "Basic" page under IKEv2 Settings there is a Remote and Local PSK, and then under Advanced>Crypto Map Entry there is another field titled "Preshared Key (for ikev2)." Again, all three of these have to be set or the ASA will not let you save the configuration. Does anyone know how these 3 preshared keys translate to the 1 preshared key you can specify on the XG? I called support and they did not know. Unfortunately, I do not manage the other end of the tunnel (the ASA side) and I need to send the other companies networking team the details on how it should be configured. I'd rather not look like an idiot and just guess and have to go back and forth trying to get this working. I have an ASA in my lab that I'm looking at the settings on. So has anyone set this up? Seems like it would be a fairly common setup, but I have searched, googled, and called support, and so far haven't found anything.
This thread was automatically locked due to age.
