Follow steps to migrate from 2DES to AES 256 Create keyring normally Create an ISAKMP policy for AES 256 Create an ISAKMP policy for 3DES (or vise versa) Create ISAKMP profile with matching keyring and identity address Create Transform-set for 3DES Create Transform-set for AES 256(or vise
Read more →If you using multiple IPSec profiles, you may run into multiple issues. Changing tunnel protection without rebooting: Follow sequence interface tunnel 20 shut exit ! interface tunnel 20 no tunnel protection ipsec profile DMVPN_IPS shared exit ! interface tunnel 20 no shut ! end Showing ISAKMP SA
Read more →