Cisco Cisco Packet Data Gateway (PDG)
Sample L2 Interchassis HA Configuration
▀ ASR 9000 Chassis RSP Configuration (IOS-XR)
▄ SecGW Administration Guide, StarOS Release 17
84
ASR 9000 Primary Chassis
hostname <ASR9K_primary_hostname>
clock timezone <timezone>
clock <clock_settings>
logging console critical
logging buffered 99999999
tftp vrf default ipv4 server homedir /
telnet vrf default ipv4 server max-servers 50
domain name <domain_name>
cdp
configuration commit auto-save filename <unique_ASR9K_config_filename>
vrf ike1
!
vrf ike2
!
vrf ike3
!
vrf ike4
!
line console
exec-timeout 0 0
length 50
!
line default
exec-timeout 0 0
!
onep
transport type tls localcert onep-tp disable-remotecert-validation
!
virtual-service enable
virtual-service SecGW1
vnic interface TenGigE0/4/1/0
vnic interface TenGigE0/4/1/1
vnic interface TenGigE0/4/1/2
activate
!
virtual-service enable
virtual-service SecGW2
vnic interface TenGigE0/4/1/3
vnic interface TenGigE0/4/1/4
vnic interface TenGigE0/4/1/5
activate
!
virtual-service enable
virtual-service SecGW3
vnic interface TenGigE0/4/1/6
vnic interface TenGigE0/4/1/7
vnic interface TenGigE0/4/1/8
activate
clock timezone <timezone>
clock <clock_settings>
logging console critical
logging buffered 99999999
tftp vrf default ipv4 server homedir /
telnet vrf default ipv4 server max-servers 50
domain name <domain_name>
cdp
configuration commit auto-save filename <unique_ASR9K_config_filename>
vrf ike1
!
vrf ike2
!
vrf ike3
!
vrf ike4
!
line console
exec-timeout 0 0
length 50
!
line default
exec-timeout 0 0
!
onep
transport type tls localcert onep-tp disable-remotecert-validation
!
virtual-service enable
virtual-service SecGW1
vnic interface TenGigE0/4/1/0
vnic interface TenGigE0/4/1/1
vnic interface TenGigE0/4/1/2
activate
!
virtual-service enable
virtual-service SecGW2
vnic interface TenGigE0/4/1/3
vnic interface TenGigE0/4/1/4
vnic interface TenGigE0/4/1/5
activate
!
virtual-service enable
virtual-service SecGW3
vnic interface TenGigE0/4/1/6
vnic interface TenGigE0/4/1/7
vnic interface TenGigE0/4/1/8
activate