API tools faq
paste
madwulf

CSR2

madwulf
Jan 28th, 2022
1,550
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.94 KB | None | 0 0
raw download clone embed print report
  1. #Group Policy
  2. CSFW2(config)# group-policy Site1 internal
  3. CSFW2(config)# group-policy Site1 attributes
  4. CSFW2(config-group-policy)# vpn-tunnel-protocol ikev2
  5.  
  6. #Prehshared Keys
  7. CSFW2(config)# tunnel-group 197.65.213.2 type ipsec-l2l
  8. CSFW2(config)# tunnel-group 197.65.213.2 ipsec-attributes
  9. CSFW2(config-tunnel-ipsec)# ikev2 local-authentication pre-shared-key site2
  10. CSFW2(config-tunnel-ipsec)# ikev2 remote-authentication pre-shared-key site1
  11.  
  12. CSFW2(config)# sh run tunnel-group
  13. tunnel-group 197.65.213.2 type ipsec-l2l
  14. tunnel-group 197.65.213.2 ipsec-attributes
  15. ikev2 remote-authentication pre-shared-key *****
  16. ikev2 local-authentication pre-shared-key *****
  17.  
  18. CSFW2(config)# tunnel-group 197.65.213.2 general-attributes
  19. CSFW2(config-tunnel-general)# default-group-policy Site1
  20.  
  21. #IKEv2 proposal
  22. CSFW2(config)# crypto ikev2 policy 10
  23. CSFW2(config-ikev2-policy)# encryption aes-256
  24. CSFW2(config-ikev2-policy)# integrity sha256
  25. CSFW2(config-ikev2-policy)# prf sha256
  26. CSFW2(config-ikev2-policy)# group 24
  27.  
  28. CSFW2(config-ikev2-policy)# sh running-config crypto ikev2
  29. crypto ikev2 policy 10
  30. encryption aes-256
  31. integrity sha256
  32. group 24
  33. prf sha256
  34. lifetime seconds 86400
  35.  
  36. #Interesting Traffic
  37. access-list IT extended permit ip 192.168.2.0 255.255.255.0 192.168.1.0 255.255.255.0
  38.  
  39. #Transofrm set
  40. CSFW2(config)# crypto ipsec ikev2 ipsec-proposal Site1
  41. CSFW2(config-ipsec-proposal)# protocol esp encryption aes-256
  42. CSFW2(config-ipsec-proposal)# protocol esp integrity sha-256
  43.  
  44. CSFW2(config-ipsec-proposal)# sh run crypto ipsec
  45. crypto ipsec ikev2 ipsec-proposal Site1
  46. protocol esp encryption aes-256
  47. protocol esp integrity sha-256
  48.  
  49.  
  50. #Crypto Map
  51. CSFW2(config)# crypto map Crypto_Map 100 set ikev2 ipsec-proposal Site1
  52. CSFW2(config)# crypto map Crypto_Map 100 match address IT
  53. CSFW2(config)# crypto map Crypto_Map 100 set peer 197.65.213.2
  54. CSFW2(config)# crypto map Crypto_Map interface Outside
  55.  
  56. CSFW2(config)# crypto ikev2 enable Outside
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!