Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guys,
I need to configure 2 Ikev2 VPN from my router (ISR4410) to 2 different Fortigate of same customer . In the nutshell these 2 VPN will be the back of each other.
The problem is that when I configure both VPN in the same Profiles and Crypto ma...
Hi guys,
I have a problem to configure VPN IPSec tunnel with Ikev2.I have already an IPSEC VPN Ikev1 configured, up and running, and I need to configure a new one with IkeV2.
I have tried to configure but , during the crypto isakmp debug I received ...
Thanks guys for you replies.
I don't use VTI becasue I'm not confident with VTI tunnel configuration . I used the crypto map, and when I configure the single (for both IP addresses) the tunnels Phase 1 and phase 2 are up and I'm able to ping the cu...
Thanks for the example.The only difference between our configuration is that I have no IPSEC profile but I have applied to crypto map.
crypto map VPN_TRAFFIC-CUST 30 ipsec-isakmpset peer 10.21.X.1Xset transform-set ESP-AES256-SHA256 set ikev2-profile...
From your last post I have added the vrf in Ikev2 Policy:crypto ikev2 policy CUST_IKEv2-POLICYproposal CUST_IKEv2-PROPOSALmatch fvrf CUST_VRF
and now i receive this error:
May 21 15:29:19.055: IKEv2-ERROR:(SESSION ID = 81550,SA ID = 1):: Failed to re...
Hi HMH,
below the configuration, yes on ikev1 configuration i haven't add the vrf and it's ok
crypto ikev2 keyring CUST_KEYRING_IKEv2peer CUSTOMER address 10.21.X.Xpre-shared-key SECRETKEY
crypto ikev2 proposal CUST_IKEv2-PROPOSALencryption aes-cbc-...
