Cisco Cisco Packet Data Interworking Function (PDIF)
ipv6 route <wsg_iproute_clear3_IPv6-address/mask> <wsg_iproute_clear3_nexthop_IPv6-address>
interface clear
ipv6 route <wsg_iproute_ike2_IPv6-address/mask> <wsg_iproute_ike2_nexthop_IPv6-address> interface
ike
ip route <wsg_iproute_ike2_IPv4-address mask> <wsg_iproute_ike2_IPv4-address> ike
ip route <wsg_iproute_ike3_IPv4-address mask> <wsg_iproute_ike3_IPv4-address> ike
ipv6 route <wsg_iproute_clear4_IPv6-address/mask> <wsg_iproute_clear4_nexthop_IPv6-address>
ip route <wsg_iproute_ike3_IPv4-address mask> <wsg_iproute_ike3_IPv4-address> ike
ipv6 route <wsg_iproute_clear4_IPv6-address/mask> <wsg_iproute_clear4_nexthop_IPv6-address>
interface clear
ipv6 route <wsg_iproute_clear5_IPv6-address/mask> <wsg_iproute_clear5_nexthop_IPv6-address>
interface clear
ipv6 route <wsg_iproute_ike3_IPv6-address/mask> <wsg_iproute_ike3_nexthop_IPv6-address> interface
ike
ip route <wsg_iproute_ike4_IPv4-address mask> <wsg_iproute_ike4_IPv4-address> ike
ip route <wsg_iproute_ike5_IPv4-address mask> <wsg_iproute_ike5_IPv4-address> ike
ip route <wsg_iproute_ike5_IPv4-address mask> <wsg_iproute_ike5_IPv4-address> ike
ip sri-route <wsg_sri-route_IPv4-address> next-hop<wsg_sri-route_nexthop_IPv4-address> interface
ike
ip rri-route network-mode L3 <wsg_rri-route_network-mode_IPv4-address>
next-hop<wsg_rri-route_network-mode_nexthop_IPv4-address> interface clear
#exit
connectedapps
connectedapps
sess-userid root
sess-passwd encrypted password <unique_encrypted_password>
sess-name <srp_hsrp-group_number>
sess-ip-address <connectapps_session_IPv4-address>
rri-mode BOTH
ha-chassis-mode inter
ha-network-mode L3
ca-certificate-name ca-cert-tls
activate
sess-passwd encrypted password <unique_encrypted_password>
sess-name <srp_hsrp-group_number>
sess-ip-address <connectapps_session_IPv4-address>
rri-mode BOTH
ha-chassis-mode inter
ha-network-mode L3
ca-certificate-name ca-cert-tls
activate
#exit
wsg-lookup
wsg-lookup
priority 1 source-netmask 28 destination-netmask 28
priority 2 source-netmask 32 destination-netmask 32
priority 3 source-netmask 16 destination-netmask 16
priority 4 source-netmask 24 destination-netmask 24
priority 5 source-netmask 16 destination-netmask 24
priority 2 source-netmask 32 destination-netmask 32
priority 3 source-netmask 16 destination-netmask 16
priority 4 source-netmask 24 destination-netmask 24
priority 5 source-netmask 16 destination-netmask 24
#exit
port ethernet 1/10
port ethernet 1/10
no shutdown
vlan <port_1/10_vlan_id>
vlan <port_1/10_vlan_id>
no shutdown
bind interface ike wsg
bind interface ike wsg
#exit
#exit
port ethernet 1/11
port ethernet 1/11
no shutdown
vlan <port_1/11_vlan_id_wsg>
vlan <port_1/11_vlan_id_wsg>
no shutdown
bind interface clear wsg
bind interface clear wsg
#exit
vlan <port_1/11_vlan_id_srp>
vlan <port_1/11_vlan_id_srp>
no shutdown
bind interface icsr srp
bind interface icsr srp
#exit
#exit
end
SecGW Administration Guide, StarOS Release 19
147
Sample L3 Interchassis HA Configuration
SecGW VM Configuration - Primary ASR 9000 Chassis