Ikev2 VPN configuration with debug and wireshark explaination
Hi Friends,
Please checkout my new video on Site to Site ikev2 VPN with certificate between routers . If you like this video give it a thumps up and subscribe my channel for more video. Have any question put it on comment section.
Please watch below video before watching this
Site to Site Ikev2 asymmetric Pre Shared key explainnation with wireshark
• Site to Site Ikev2 asymmetric Pre Shared ...
Site to Site VPN with Certificate - Wireshark Capture
• Site to Site VPN with Certificate - Wiresh...
Steps to Configure Ikev2 Site to Site VPN
Define proposal
crypto ikev2 proposal VPN_PRO
encryption 3des
integrity sha256
group 2
Put that proposal into policy
crypto ikev2 policy 10
proposal VPN_PRO
!
Define profile for authentication method
crypto ikev2 profile PROFILE
match identity remote address 200.1.2.10 255.255.255.0
authentication remote rsa-sign
authentication local rsa-sig
pki truspoint (truspoint name)
access-list 101 permit ip x.x.x.x x.x.x.x x.x.x.x x.x.x.x
Define transform set
crypto ipsec transform-set TSET esp-3des esp-md5-hmac
mode tunnel
Define crypto map
crypto map CMAP 10 ipsec-isakmp
set peer 200.1.2.10
set ikev2-profile PROFILE
match address 101
reverse-route static
Apply this map to interface
int g0/0
crypto map CMAP
#Ikev2 #VPN #bikashtech
~-~~-~~~-~~-~
Please watch: "Palo Alto Firewall Basic Configuration | Zone | Security Policy | NAT | Virtual Router"
• Palo Alto Firewall Basic | Configuration |...
~-~~-~~~-~~-~