Cisco 3945- IKEv2 IPsec VPN- IKEv2:% IKEv2 profile not found

[gautamanish]

Hi

i am trying to establish ikev2 ipsec vpn with cisco 3945 and Microsoft Azure.

Cisco 3945 is using image c3900e-universalk9-mz.SPA.154-3.M2.bin.

ipsec does not come up and in the debug we keep getting following error that profile not found.

IKEv2:% IKEv2 profile not found

configuration of cisco 3945 is enclosed

[Rob Ingram]

Whatabout the configuration for the other router?

[gautamanish]

Hi RJI

thanks a lot for your help, ipsec IKEv2 has come up with microsoft azure as per your suggested config. 

one more query if you can help we have 2 3900 working in HA for IKEv1 HA we use following command on wan interface , could you suggest equivalent for ikev2

crypto map INTERNET_VPNs redundancy VPNHA stateful

[Rob Ingram]

Hi,
I'd personally run a VTI rather than crypto map. You then have the option to have an active/active - 2 tunnels up and load balancing or active/standby with a delay on a routing protocol to prefer 1 tunnel over the other, if the primary router fails the routing adjacency will drop and re-route over the secondary tunnel.

HTH