| keyring | 按 peer 名称匹配地址与 PSK |
|---|---|
| profile | 阶段一参数、身份与认证方式 |
| 引用 | crypto map 或 ipsec profile 调用 |
| 查看 | show crypto ikev2 sa / session |
配置示例
配置示例
crypto ikev2 keyring KEYRING
peer SITE2
address 203.0.113.2
pre-shared-key local LOCAL-PSK
pre-shared-key remote REMOTE-PSK
!
crypto ikev2 profile IKEV2-PROF
match identity remote address 203.0.113.2 255.255.255.255
authentication remote pre-share
authentication local pre-share
keyring local KEYRING
!
show crypto ikev2 sa