Skip to end of metadata
Go to start of metadata

You are viewing an old version of this content. View the current version.

Compare with Current View Version History

« Previous Version 2 Current »

headerFTU.jpg

IKEv2

config

IPSec

crypto ipsec security-association replay disable
crypto ipsec spi-prefix 8

crypto ipsec transform-set AES-CBC-256-SHA-256
 esp-aes-256 esp-sha256-hmac
 mode transport
exit
crypto ipsec transform-set ESP-GCM-256
 esp-gcm-256
 mode        transport
exit

crypto ipsec profile Ikev2IpsecProfile-1-internet
 set pfs group20
 set security-association lifetime kilobytes disable
 set security-association lifetime seconds 3600
 set ikev2-profile Ikev2Profile-1-internet
 set transform-set ESP-GCM-256 AES-CBC-256-SHA-256
 set spi-group 1
exit
crypto ipsec profile Ikev2IpsecProfile-1-mpls
 set pfs group20
 set security-association lifetime kilobytes disable
 set security-association lifetime seconds 3600
 set ikev2-profile Ikev2Profile-1-mpls
 set transform-set ESP-GCM-256 AES-CBC-256-SHA-256
 set spi-group 1
exit

  • No labels