crypto ikev2 keyring T-customer-KeyRing
 peer US_EAST
  address a.b.252.89
  pre-shared-key xxxxx
 !
 peer US_WEST
  address y.y.229.152
  pre-shared-key xxxxx
 !
 
 
 crypto ikev2 proposal T-customer-IKEv2-Proposal
 encryption aes-cbc-256
 integrity sha256
 group 14
 
 
 
 crypto ikev2 policy T-customer-Policy
 match address local x.x.52.15
 proposal T-customer-IKEv2-Proposal
 
 
 crypto ikev2 profile T-customer-IKEv2-Profile_East
 match identity remote address a.b.252.89 255.255.255.255
 identity local address x.x.52.15
 authentication remote pre-share
 authentication local pre-share
 keyring local T-customer-KeyRing
 lifetime 28800
!
crypto ikev2 profile T-customer-IKEv2-Profile_West
 match identity remote address y.y.229.152 255.255.255.255
 identity local address x.x.52.15
 authentication remote pre-share
 authentication local pre-share
 keyring local T-customer-KeyRing
 lifetime 28800
 
 crypto ipsec profile customer-IPsec-Profile_East
 set transform-set aes-256
 set pfs group14
 set ikev2-profile T-customer-IKEv2-Profile_East
!
crypto ipsec profile customer-IPsec-Profile_West
 set transform-set aes-256
 set pfs group14
 set ikev2-profile T-customer-IKEv2-Profile_West
 
 
 interface Tunnel2
 description T US East Tunnel 1
 ip address 192.168.20.9 255.255.255.252
 ip mtu 1400
 ip nat outside
 ip tcp adjust-mss 1360
 tunnel source x.x.52.15
 tunnel mode ipsec ipv4
 tunnel destination a.b.252.89
 tunnel protection ipsec profile customer-IPsec-Profile_East
!
interface Tunnel3
 description T US West Tunnel 1
 ip address 192.168.20.13 255.255.255.252
 ip mtu 1400
 ip nat outside
 ip tcp adjust-mss 1360
 tunnel source x.x.52.15
 tunnel mode ipsec ipv4
 tunnel destination y.y.229.152
 tunnel protection ipsec profile customer-IPsec-Profile_West