New answers tagged site-to-site-vpn
Your best bet (without interrogating the CLI) is to look at the release notes. You say the appliance is NEW, so I assume iOS version 9.1x. http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/release/notes/asarn91.html When configuring for IKEv2, for security reasons you should use groups 21, 20, 19, 24, 14, and 5. We do not recommend Diffie Hellman ...
It turned out that we needed to use SHA-1 not SHA-256 I answer myself in case someone should come across the same cryptic error messages (or if I should do so myself in the future)
Top 50 recent answers are included