topic Does Expedition support IKEv2? in Expedition Discussions

Does Expedition support IKEv2?

John_Hutson — Thu, 16 Nov 2023 17:28:21 GMT

When I edit my IPSec VPN IKE gateways I cannot see any IKEv2 column on the page and I cannot add one.

When looking at the IKE gateway configuration I can see IKE2 settings and my correct settings are there.

When I export the configuration and import into Panorama all of the IPSec tunnels are missing.

I can see the IPSec configurations in the exported configuration XML file.

Could this be a bug with Expedition or is IKEv2 not yet supported?

This is a Panorama to Panorama migration.

Re: Does Expedition support IKEv2?

dpuigdomenec — Thu, 16 Nov 2023 18:58:58 GMT

Hi @John_Hutson

I will suggest you manage the VPN configuration directly in the Panorama instead of using Expedition. There are attributes, pre-shared keys for instance that will not work as well as new PANOS versions are not allowing to import them in plain text.
Also if you are migrating from one Panorama to another Panorama the PANOS export and import options should work for you without requiring importing and exporting the configuration in Expedition.

Once you have your configuration pushed to your Panorama you can download it to Expedition and do some optimization like removing duplicates and merging similar policies among other features Expedition can help with.
Hope this helps,

Re: Does Expedition support IKEv2?

John_Hutson — Thu, 16 Nov 2023 19:04:11 GMT

Thanks for the response. I've been thinking I may have to do the VPN manually. It seems the same may apply to the Globalprotect configurations as well.

We are actually migrating from one firewall platform to another and need to remap interfaces, etc. Expedition helps remove any errors in that regard. It's unfortunate the manual copy of VPN info will come with that human error factor.

Re: Does Expedition support IKEv2?

LuannRakestraw — Sat, 18 Nov 2023 09:34:33 GMT

I recommend contacting Expedition support or the vendor for assistance. It might be a bug or a compatibility issue. Ensure you're using the latest version and inquire about IKEv2 support for a smooth Panorama to Panorama migration.

Re: Does Expedition support IKEv2?

jzbick — Mon, 20 Nov 2023 13:06:05 GMT

Hi John,

you are correct, the same is applying to GP. Please configure this at your panorama as well as describey by @dpuigdomenec. As also mentioned you can import the config then to Expedition and do the optimisation from here.

Please let us know if you have any further questions.

Regards!