IPsec with IKE tunnel config
Hello,
I've made this configuration:
ike-interface
state enabled
ike-version 2
address X.X.X.231
realm-id Centrex_IPSEC
ike-mode responder
dpd-params-name
v2-ike-life-secs 86400
v2-ipsec-life-secs 28800
v2-rekey none
esnSupport disabled
shared-password ********
eap-protocol
sd-authentication-method none
certificate-profile-id-list
cert-status-check disabled
cert-status-profile-list
access-control-name
tunnel-orig-name-list
options
ike-sainfo
name centrex
security-protocol esp-auth
auth-algo sha2-256
encryption-algo aes
ipsec-mode tunnel
tunnel-local-addr X.X.X.231
tunnel-remote-addr Y.Y.Y..145
security-policy
name centrex
network-interface s0p1:0
priority 10
local-ip-addr-match X.X.X.230
remote-ip-addr-match Y.Y.Y..191
local-port-match 0
local-port-match-max 65535
remote-port-match 0
remote-port-match-max 65535
trans-protocol-match ALL
direction both
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
action ipsec
ike-sainfo-name centrex
outbound-sa-fine-grained-mask
local-ip-mask 255.255.255.255
remote-ip-mask 255.255.255.255
local-port-mask 0
remote-port-mask 0
trans-protocol-mask 0
valid enabled
sa-lookup-exception enabled
vlan-mask 0xFFF