How to create an IPsec tunnel in router SD-WAN router

[maverick0]

I'm seeking Cisco documentation to guide me in creating a traditional IPsec tunnel and an IPsec tunnel with GRE between a Cisco SD-WAN router and a Cisco non-SD-WAN router.

Thanks a lot!

[Jeongjun Park]

Hi.

If you are saying that 8000V as a SD-WAN router, You need a security9k for IPsec. (No IPsec command without it)

The configuration of IPsec is completely same with non SD-WAN router. (GRE over IPsec as well)

[Kanan Huseynli]

Use cli add-on template and traditional configuration.Pay attention VRF number should match configured service-side VRF.

https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/221001-configure-service-side-ipsec-tunnel-with.html

Note: in sdwan router, only routed based IPSEC (VTI) is supported, not policy based (crypto map)

[dijix1990]

For cisco sdwan I used Feature template IPSEC and after added it to transport as "Cisco VPN Interface IPsec" or you can add it into service vpn as "Cisco VPN Interface IPsec"