EasyManua.ls Logo

Cisco IOS XR

Cisco IOS XR
254 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
Configuration Examples for Implementing IKE Security Protocol
SC-72
Cisco IOS XR System Security Configuration Guide
dot1q vlan 63
!
interface GigabitEthernet0/1/0/0.11
vrf FVRF
ipv4 address 10.0.91.1 255.255.255.0
dot1q vlan 91
!
interface GigabitEthernet0/1/0/0.12
vrf FVRF
ipv4 address 10.0.92.1 255.255.255.0
dot1q vlan 92
!
interface GigabitEthernet0/1/0/0.13
vrf FVRF
ipv4 address 10.0.93.1 255.255.255.0
dot1q vlan 93
interface service-ipsec15
vrf IVRF1
ipv4 address 115.115.115.115 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof15 tunnel vrf FVRF
tunnel source 10.20.100.15
interface service-ipsec16
vrf IVRF2
ipv4 address 116.116.116.116 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof16 tunnel vrf FVRF
tunnel source 10.20.100.16
tunnel destination 10.0.85.2
router static
address-family ipv4 unicast
1.7.0.3/32 service-ipsec15
1.7.0.4/32 service-ipsec15 vrf FVRF
address-family ipv4 unicast
10.0.0.0/16 10.0.83.1
crypto isakmp
crypto isakmp policy 60
authentication pre-share
hash sha
group 5
encryption aes
lifetime 86400
!
crypto keyring kr11 vrf FVRF
pre-shared-key address 10.0.91.2 255.255.255.255 key key-vrf
pre-shared-key address 10.0.92.2 255.255.255.255 key key-vrf
pre-shared-key address 10.0.93.2 255.255.255.255 key key-vrf
!
crypto keyring kr12 vrf FVRF
local-address 10.20.100.16
pre-shared-key address 0.0.0.0 0.0.0.0 key key16
!
crypto isakmp profile isakmp-prof6
keyring kr11
match identity address 10.0.91.2/32 vrf FVRF
set interface service-ipsec15
match identity address 10.0.92.2/32 vrf FVRF
set interface service-ipsec15
match identity address 10.0.93.2/32 vrf FVRF
set interface service-ipsec15
!
!

Table of Contents

Related product manuals