Security Gateway And Crypto Map Template Configuration - Cisco ASR 5000 Series 3G Home NodeB Administration Manual

HNB-GW Service Configuration Procedures
end
Notes:
 <
vpn_ctxt_name
 <
x.509_cert_name
<
PKI_pem_data_string
 <
ca_root_cert_name
configured for CPE.

Security Gateway and Crypto map Template Configuration

Use the following example to configure the IPsec profile and Crypto map template enabling SeGW on HNB-GW for
IPsec tunneling.
configure
context <vpn_ctxt_name>
eap-profile <eap_prof_name>
mode authentication-pass-through
exit
ip pool ipsec <ip_address> <subnetmask>
ipsec transform-set <ipsec_trans_set>
exit
ikev2 transform-set <ikev2_trans_set>
exit
crypto template <crypto_template>
authentication eap-profile <eap_prof_name>
exit
ikev2-ikesa transform-set list <ikev2_trans_set>
payload <crypto_payload_name> match childsa [match {ipv4 | ipv6}]
ip-address-alloc dynamic
ipsec transform-setlist <ipsec_trans_set>
exit
ikev2-ikesa keepalive-user-activity
end
OL-25069-03
> is name of the source context in which HNB-GW service is configured.
> is name of the x.509 certificate where PEM data <
> is configured.
> is name of the CA root certificate where PEM data <
pem_data_string
Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide ▄
HNB-GW Service Configuration ▀
> and PKI
> is
pem_data_string
83