Chapter 7. IKEv2 Deployments
This chapter introduces a number of designs where IKEv2 is used. Each design will use a simple deployment of two routers with the focus on the configuration of IKEv2. Although each scenario uses only two routers, the configuration can scale as required if needed.
The configuration is intended to be as simple as possible, and the emphasis is focused on the IKEv2 configuration.
Pre-shared-key Authentication with Smart Defaults
This configuration is the simplest to set up. By using smart defaults, a VPN is created between two peers using minimal configuration: only the IKEv2 profile and corresponding IKEv2 keyring are required.
Figure 7-1 illustrates the topology. The transport network is using IPv6, and the overlay ...