20 likes | 233 Views
Interface Tunnel. IKEV2 Proposal. IKEV2 Profile. Key Ring. IPSEC Profile. IKEV2 Policy. IPSEC Transform Set. IKE. IPSEC. IOS FlexVPN Building Blocks. crypto ikev2 proposal ccnp-ike2-proposal encryption aes-cbc-256 integrity sha512 group 20. crypto ikev2 policy ccnp-ikev2-policy
E N D
Interface Tunnel IKEV2 Proposal IKEV2 Profile Key Ring IPSEC Profile IKEV2 Policy IPSEC Transform Set IKE IPSEC IOS FlexVPN Building Blocks
crypto ikev2 proposal ccnp-ike2-proposal encryption aes-cbc-256 integrity sha512 group 20 crypto ikev2 policy ccnp-ikev2-policy match fvrf any proposal ccnp-ike2-proposal crypto ikev2 keyring KR peer HQ-ISR address 192.0.2.3 pre-shared-key local cisco123 crypto ikev2 profile ccnp-ikev2-profile match identity remote fqdn domain secure-x.public match identity remote fqdn domain partner.public identity local fqdn branch-isr.secure-x.public authentication remote pre-share authentication local pre-share virtual-template 1 keyring local KR crypto ipsec transform-set ccnp-ts esp-gcm 256 mode tunnel crypto ipsec profile ccnp-ipsec-profile set transform-set ccnp-ts set pfs group20 set ikev2-profile ccnp-ikev2-profile interface Tunnel0 ip address negotiated tunnel source GigabitEthernet0/1 tunnel destination 192.0.2.3 tunnel protection ipsec profile ccnp-ipsec-profile