Given a windows server 2012 client (which I have under full administrator control), and an external Cisco ASA5540 router (which I don't), I'd like to connect to the router to access their internal network via ipsec VPN.
Connection details are:
IKE Phase-1:
Encryption Scheme: IKE
Key Exchange methods: 3DES
Hashing Algorithm: MD5
Authentication Method: Pre-shared Secret
Aggressive Mode Support: No
Diffie Helmen Group for Phase1: Group 2 (preferred)
IKE SA (phase 1 ) lifetime: 1440 Seconds
IKE Phase-2:
Encryption Scheme: IKE
Transform (IPSec Protocol): ESP
Encryption Algorithm 3DES
Data Integrity: MD5
Use Perfect Forward Secrecy (PFS): No
Diffie Helmen group for PFS: Group 2 (preferred)
IPSEC SA (phase 2) lifetime 28800 seconds
Key Exchange For Subnets: Yes
Encryption domain: 192.168.113.0/24 Security policy rules: Source: 10.135.1.80/32 -> Destination: 192.168.251.32/32
(I can't make changes to the router's config)
What are the specific steps to connect to this router using any client, or method whatsoever?
PFS: no
andDH group: group 2
both in phase 2. If PFS were being used, it would look something likePFS: yes, DH group 2
. If PFS were not being used, thenDH group
would be omitted.secpol.msc
and configure everything manually. The administrator of the firewall has to add your public IP to their config for it to work.