Which command simplifies the task of converting an SSL VPN to an IKEv2 VPN on a Cisco
ASA appliance that has an invalid IKEv2 configuration?
A.
migrate remote-access ssl overwrite
B.
migrate remote-access ikev2
C.
migrate l2l
D.
migrate remote-access ssl
b
Correct Answer is A
Migration Overview
If your IKEv1, or even SSL, configuration already exists, the ASA makes the migration process simple. On the command line, enter the migrate command:
migrate {l2l | remote-access {ikev2 | ssl} | overwrite}
Things of note:
Keyword definitions:
l2l – This converts current IKEv1 l2l tunnels to IKEv2.
remote access – This converts the remote access configuration. You can convert either the IKEv1 or the SSL tunnel groups to IKEv2.
overwrite – If you have a IKEv2 configuration that you wish to overwrite, then this keyword converts the current IKEv1 configuration and removes the superfluous IKEv2 configuration.