для Cisco Cisco Packet Data Gateway (PDG)
Configuring the Evolved Packet Data Gateway
Configuring the System to Perform as an Evolved Packet Data Gateway ▀
ePDG Administration Guide, StarOS Release 18 ▄
97
hmac aes-xcbc-96
exit
ikev2-ikesa transform-set <ikev2_ikesa_tset_name>
hmac aes-xcbc-96
prf aes-scbc-128
exit
crypto template <crypto_template_name> ikev2-dynamic
authentication remote eap-profile <eap_profile_name>
exit
ikev2-ikesa retransmission-timeout <milliseconds>
ikev2-ikesa transform-set list <ikev2_ikesa_tset_name>
ikev2-ikesa rekey
payload <payload_name> match childsa match any
ipsec transform-set list <ipsec_tset_name>
lifetime <seconds>
rekey keepalive
exit
ikev2-ikesa keepalive-user-activity
ikev2-ikesa policy error-notification
ikev2-ikesa policy use-rfc5996-notification
exit
ip routing maximum-paths <max_num>
interface <swu_interface_name>
ip address <ip_address> <subnet_mask>
exit
interface <swm_interface_name>
ip address <ip_address> <subnet_mask>
exit
interface <epdg_dns_interface_name>