Tip

This is the documentation for the 19.12 version. Looking for the documentation of the latest version? Have a look here.

IPsec Configuration

The ipsec tunnel <n> command, issued from config mode, changes to IPsec tunnel mode. This is denoted by config-ipsec-tun in the prompt.

The identifier number for tunnel entries starts at 0 and increments by one. To determine the next tunnel number for a new entry, run ipsec tunnel ? and TNSR will print the existing tunnel ID numbers.

This command creates an IPsec tunnel with an identifier of 0:

tnsr(config)# ipsec tunnel 0
tnsr(config-ipsec-tun)#

The remainder of the configuration is covered in the following sections.

• IPsec Endpoints
  • IPsec Endpoint Example
• IPsec Keys
  • IKE Configuration
  • IKE Example
  • Additional IKE Configuration
• Security Associations
  • Child SA Example
• Configuring the IPsec Interface
  • IPsec Interface Example
• IPsec Routes
  • IPsec Static Route Example