Labs disponibles
π
VTI β Virtual Tunnel Interface
Tunnel route-based R1 β R2, Γ©changes IKEv2 interactifs
π
NAT Traversal bientΓ΄t
IKEv2 derrière NAT, UDP 4500
π
Certificats PKI bientΓ΄t
Auth X.509, CA locale, enrollment
π§
Troubleshooting bientΓ΄t
debug crypto ikev2, analyse des erreurs
Config IKEv2 β RΓ©fΓ©rence Cisco IOS
π
01IKEv2 Configuration Overview
Vue d'ensemble, objets, ordre de config
π
02IKEv2 Proposal
Algorithmes IKE SA β encryption, integrity, DH
π
03IKEv2 Policy
SΓ©lection du proposal, FVRF, adresse locale
ποΈ
04IKEv2 Keyring
Pre-Shared Keys, peers, wildcards
π€
05IKEv2 Profile
IdentitΓ©, auth PSK/cert, VRF, DPD
βοΈ
06IKEv2 Global Configuration
Timers, NAT-T, Cookie, limites de SA
π
07PKI Configuration
Trustpoint, enrollment, certificats X.509
π‘οΈ
08IPsec Configuration
Transform-set, IPsec Profile, VTI, Crypto Map
β¨
09Smart Defaults
Valeurs par dΓ©faut Cisco, ce qui est optionnel