7: Networking
EMG™ Edge Management Gateway User Guide 131
Cisco ISR 2921 Pre-Shared Key / XAUTH / IKEv2
This configuration is an example of a remote access connection to a Cisco ISR2921 VPN server /
responder.
Console manager configuration
The pre-shared key needs to be configured via the console manager UI.
conn ISR2921
keyexchange=ikev2
ike=aes-sha2_384-modp1536!
esp=3des-sha2_384-!
aggressive=no
lifetime=86400s
forceencaps=no
authby=secret
left=%any
leftsubnet=192.168.0.0/24
modeconfig=pull
right=192.168.1.102
rightsubnet=192.168.2.0/24
dpddelay=0
dpdtimeout=120
dpdaction=restart
auto=start
type=tunnel
Cisco configuration
crypto ikev2 proposal PROP
encryption aes-cbc-128
integrity sha256
group 2
crypto ikev2 policy ikev2policy
proposal PROP
crypto ikev2 keyring KEYRING
peer ALL
address 0.0.0.0 0.0.0.0
pre-shared-key local cisco123
pre-shared-key remote cisco123
crypto ikev2 profile IKEv2_Profile
match identity remote address 192.168.1.100 255.255.255.0
identity local address 192.168.1.102
authentication remote pre-share
authentication local pre-share
keyring local KEYRING
crypto isakmp policy 1
encr aes
authentication pre-share
To Next Page
Loading...
Need help?
General
