Today we are using Shrewsoft VPN client L2TP/IPsec IKEv1 to access the office, remote access VPN with a shared key. I am trying to tweak our current Cisco ASA 5505 configuration through asdm so I can use Windows 10 Native VPN instead of shrewsoft client.
My VPN knowledge is pretty limited, but I have figured out that I get an mismatch error on phase 1 (from the Asa 5505 syslog window when trying to connect). It seems like the router is using DH group 2, and windows is using DH group 5.
Where do I find what isakmp policy the windows client is using, so I can match those on the router? Is it possible to change this policy? I can only find settings for some authentication (CHAP/PAP) and data encryption...
Some advice how to change these DH and encryption methods in asdm would also help.