Cisco Cisco Packet Data Interworking Function (PDIF)

authentication local pre-shared-key encrypted key <encrypted_key>
authentication remote pre-shared-key encrypted key <encrypted_key>
ikev2-ikesa transform-set list ikesa-foo
ikev2-ikesa rekey
payload foo-sa0 match childsa match ipv6

ipsec transform-set list tselsa-foo
rekey keepalive

#exit
identity local id-type ip-addr id <crypto_foo1_local_IPv6-address_mask>

#exit
interface clear

ip address <wsg_interface_clear_IPv4-address>
ipv6 address <wsg_interface_clear_IPv6-address> secondary

#exit
interface ike loopback

ip address <wsg_interface_ike_IPv4-address mask> srp-activate
ipv6 address <wsg_interface_ike_IPv6-address/mask> srp-activate

#exit
interface ike-loop loopback

ip address <wsg_interface_ike-loop_IPv4-address_mask> srp-activate

#exit
interface ike-loop-v6 loopback

ipv6 address <wsg_interface_ike-loop_IPv6-address/mask> srp-activate

#exit
interface ike-loop1 loopback

ip address <wsg_interface_ike-loop1_IPv4-address_mask> srp-activate

#exit
subscriber default
exit
aaa group default
#exit
wsg-service ipv4

deployment-mode site-to-site
ip access-group acl1
bind address <wsg-service_bind_IPv4-address> crypto-template foo

#exit
wsg-service ipv6

deployment-mode site-to-site
ipv6 access-group acl1
bind address <wsg-service_bind_IPv6-address_per_CPU-VM> crypto-template foo-1

#exit
ip route <wsg_iproute_clear_IPv4-address_mask> <wsg_iproute_clear__IPv4-address> clear
ip route <wsg_iproute_ike1_IPv4-address mask> <wsg_iproute_ike1_IPv4-address> ike
ip route <wsg_iproute_ike2_IPv4-address mask> <wsg_iproute_ike2_IPv4-address> ike
ip route <wsg_iproute_ike3_IPv4-address mask> <wsg_iproute_ike3_IPv4-address> ike
ipv6 route <wsg_iproute_clear_IPv6-address/mask> <wsg_iproute_clear_nexthop_IPv6-address>

interface clear

ipv6 route <wsg_iroute_ike1_IPv6-address/mask> <wsg_iproute_ike1_nexthop_IPv6-address> interface

ike

ipv6 route <wsg_iproute_ike2_IPv6-address/mask> <wsg_iproute_ike2_nexthop_IPv6-address> interface

ike

ipv6 route <wsg_iproute_ike3_IPv6-address/mask> <wsg_iproute_ike3_nexthop_IPv6-address> interface

ike

ip rri next-hop <wsg_rri_nexthop_IPv4-address> interface clear
ipv6 rri next-hop <wsg_rri_nexthop_IPv6-address> interface clear

#exit

SecGW Administration Guide, StarOS Release 19

Sample L2 Interchassis HA Configuration

SecGW VM Configuration - Primary ASR 9000 Chassis