Today we are using Shrewsoft VPN client L2TP/IPsec IKEv1 to access the office, remote access VPN with a shared key. I am trying to tweak our current Cisco ASA 5505 configuration through asdm so I can use Windows 10 Native VPN instead of Shrewsoft client.
My VPN knowledge is pretty limited, but I have figured out that I get a mismatch error on phase 1 (from the Asa 5505 Syslog window when trying to connect). It seems like the router is using DH group 2, and Windows is using DH group 5.
Where do I find what isakmp policy the Windows client is using? How I can match those on the router? Is it possible to change this policy? I can only find settings for some authentication (CHAP/PAP) and data encryption...
Some advice on how to change these DH and encryption methods in asdm would also help.