Cisco Cisco ASR 5000 Administrator's Guide

 

    ipsec transform-set <ipsec_transform_set_name> 

      exit 

    ikev2-ikesa transform-set <ikesa_transform_set_name> 

      exit 

    crypto template <crypto_template_name> ikev2-dynamic 

      authentication remote eap-profile <eap_profile_name> 

      ikev2-ikesa transform-set list <ikesa_transform_set_name> 

      payload <crypto_template_payload_name> match childsa match ipv4 

        ip-address-allocation dynamic 

Notes: 



 

<

> is the context name on which unique EAP name is to configured. 



 

<

> is a string of size 1 to 128 which configure the context level unique Extensible 

Authentication Profile (EAP) Name. 



 

<

> configures the context level name to be used for the IKEv2 IKE Security 

Association Transform Set. It is a string of size 1 to 127. 



 

<

> configures the name of the Crypto Template. It is a string of size 1 to 104. 



 

<

> is the name of the Crypto Template Payload being configured. This 

name is unique to the Crypto Template. It is a string of size 1 to 127. 

Use the following example to configure the GTP-U service parameters to provide GTP-U tunnel over S1-U interface. 
The two GTP-U  

configure 

  context <dest_ctxt_name> -noconfirm 

    gtpu-service <gtpu_svc_access> -noconfirm 

      bind address { ipv4-address | ipv6-address } <ip_address> 

      end  

configure 

  context <dest_ctxt_name> -noconfirm 

    gtpu-service <gtpu_svc_network> -noconfirm 

      bind address ipv4-address <ip_address>