

Set the authentication to a pre-shared key and enter the pre-shared key (PSK) which will be used on both sides. Select ‘create new IKE policy’ and add parameters related to Encryption ‘AES256’ Integrity hash ‘SHA256’ Pseudo random function (PRF) hash ‘SHA256’. On next page select ‘Edit’ and set the Internet Key Exchange (IKE) parameters. Then choose the remote peer’s network that will be encrypted across site-to-site VPN. Select the external interface for the FTD and then choose a local network that will need to be encrypted across site-to-site VPN. Give name to Site-to-site VPN connection a profile name. Use Site-to-site wizard on FDM as depicted below:

Navigate to Site-to-site VPN -> create Site-to-Site VPN connection Create an objectĬreate an object for the local area network behind the FDM device as shown in figure above.Ĭreate an object for remote network behind ASA device. Navigate to Objects -> Networks -> Add New NetworkĬonfigure objects for LAN networks from FDM graphic user interface (GUI). To configure a site to site VPN on FTD the first step is to configure FTD on FDM. In today’s blog we will cover in detail about how site to site VPN is configured on FTD devices. The site to site VPN is configured for FTD devices using the FirePower Defence management console. In FirePower devices we can configure site to site VPN on FTD devices. VPNs allow access to restricted sites with secure connection.
