Ciscoasa ipsec ikev2

标签：创建   应用   ble   address   enc   encrypt   out   rmi   seconds   

tunnel-group 201.1.1.100 type ipsec-l2l ------定义隧道，类型为ipsec-l2l
tunnel-group 201.1.1.100 ipsec-attributes
ikev2 remote-authentication pre-shared-key cisco ------配置预共享密钥为cisco
ikev2 local-authentication pre-shared-key cisco

6.2 IPSEC-***第二阶段ipsec配置
crypto ipsec ikev2 ipsec-proposal cisco -------定义ipsec转换集
protocol esp encryption aes-256
protocol esp integrity md5

6.3 定义map映射绑定策略与ipsec转换集
crypto map cisco 10 match address 110 -----定义crypto map，绑定***感兴趣流ACL 110
crypto map cisco 10 set peer 201.1.1.100-------指定peer对等体公网IP地址
crypto map cisco 10 set ikev2 ipsec-proposal cisco ------调用刚才创建的ipsec转换集
cryptomap cisco interface outside -------将map应用到outside接口

6.4 开启ikev2策略到outside接口
crypto ikev2 enable outside

Ciscoasa ipsec ikev2

标签：创建   应用   ble   address   enc   encrypt   out   rmi   seconds   

原文地址：https://blog.51cto.com/13251917/2541561