12-07-2021 12:48 AM - edited 12-07-2021 01:01 AM
I need to terminate a VPN connection in a Cisco C1111 8P, where I have the information below and would like a configuration example.
Enabled = Yes
Enable perfect forward secrecy = Yes
Name = [name]
Local Id = Local IP
Local Endpoint = 1.2.3.4
Local Subnets = Local Subnets IP
Peer Id = Remote IP
Peer Endpoint = 1.1.1.1
Peer Subnets = 0.0.0.0/0
Encryption Algorithm = AES-GCM
Authentication = PSK
Change Shared Key = No
Pre-Shared Key = [key]
Display Shared Key = No
Diffie_Hellman Group = DH16
Digest Algorithm = SHA-256
IKE Option = IKEv2
IKE Responder Only = No
Session Type = Policy Based Session
Thanks in advance
12-07-2021 01:54 AM
- Check the configuration-examples mentioned in this thread :
https://community.cisco.com/t5/routing/c1111-8p-ipsec-site-to-site-vpn/m-p/3819972
M.
12-09-2021 02:37 AM
Thanks for your help.
I'm still not quite sure how the CLI commands refer to the data I've got form the Edge Gateway.
In the configuration example you refer to there are some commands that confuse me:
"group 14" is that the Diffie Hellman Group ?
Where do I set the Digest Algorithm (i.e. SHA-256) ?
Where do I set the IKE option ?
12-09-2021 04:29 AM
Hello,
can you post the (running) configuration of your router with what you have configured so far ?
12-10-2021 12:31 AM - edited 12-13-2021 12:00 AM
The router is brand new and I haven't received it yet, so it just the default configuration.
Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide