crypto ipsec profile Ikev2IpsecProfile-1-internet
set pfs group20
set security-association lifetime kilobytes disable
set security-association lifetime seconds 3600
set ikev2-profile Ikev2Profile-1-internet
set transform-set ESP-GCM-256 AES-CBC-256-SHA-256
set spi-group 1
exit
crypto ipsec profile Ikev2IpsecProfile-1-mpls
set pfs group20
set security-association lifetime kilobytes disable
set security-association lifetime seconds 3600
set ikev2-profile Ikev2Profile-1-mpls
set transform-set ESP-GCM-256 AES-CBC-256-SHA-256
set spi-group 1
exit
|