Cisco Cisco Packet Data Interworking Function (PDIF)

authentication local pre-shared-key encrypted key <unique_encrypted_key>
authentication remote pre-shared-key encrypted key <unique_encrypted_key>
max-childsa 5 overload-action ignore
ikev2-ikesa transform-set list ike-ts-1
ikev2-ikesa rekey
payload ipv6 match childsa match ipv6

ip-address-alloc dynamic
ipsec transform-set list ipsec-ts-1
rekey keepalive

#exit
identity local id-type ip-addr id <crypto_ike-ts-1_IPv6-address>

#exit
interface clear

ip address <wsg_interface_clear_IPv4-address>
ipv6 address <wsg_interface_clear_IPv6-address> secondary

#exit
interface ike

ip address <wsg_interface_ike_IPv4-address>
ipv6 address <wsg_interface_ike_IPv6-address> secondary

#exit
interface ike-loop loopback

ip address <wsg_interface_ike-loop_IPv4-address_mask> srp-activate

#exit
interface wsg-service-ipv4 loopback

ip address <wsg_interface_wsg-service_loop_IPv4-address_mask> srp-activate

#exit
interface wsg-service-ipv6 loopback

ipv6 address <wsg_interface_wsg-service_loop_IPv6-address/mask> srp-activate

#exit
subscriber default
exit
aaa group default
#exit
wsg-service ipv4-ras

deployment-mode remote-access

#exit
wsg-service ipv4-s2s

deployment-mode site-to-site
ip access-group acl1
bind address <wsg-service_bind_rar_IPv4-address> crypto-template ipv4

#exit
wsg-service ipv6-s2s

deployment-mode site-to-site
ipv6 access-group acl1
bind address <wsg-service_bind_s2s_IPv6-address> crypto-template ipv6

#exit
ip route <wsg_iproute_clear1_IPv4-address_mask> <wsg_iproute_clear1_IPv4-address> clear
ip route <wsg_iproute_ike1_IPv4-address mask> <wsg_iproute_ike1_IPv4-address> ike
ip route <wsg_iproute_clear2_IPv4-address_mask> <wsg_iproute_clear2_IPv4-address> clear
ip route <wsg_iproute_clear3_IPv4-address_mask> <wsg_iproute_clear3_IPv4-address> clear
ip route <wsg_iproute_clear4_IPv4-address_mask> <wsg_iproute_clear4_IPv4-address> clear
ip route <wsg_iproute_clear5_IPv4-address_mask> <wsg_iproute_clear5_IPv4-address> clear
ipv6 route <wsg_iproute_clear1_IPv6-address/mask> <wsg_iproute_clear1_nexthop_IPv6-address>

interface clear

ipv6 route <wsg_iproute_clear2_IPv6-address/mask> <wsg_iproute_clear2_nexthop_IPv6-address>

interface clear

SecGW Administration Guide, StarOS Release 19

146

Sample L3 Interchassis HA Configuration

SecGW VM Configuration - Primary ASR 9000 Chassis