Good Day,
There seems to be alot of variations when coming to this topic. What are the benefits or even limitations of using the approach outline in your article as oppose to the approach below:
HUB ROUTER CONFIGURATION
Step 1: Configure the crypto keyring for pre-shared keys
Step 2: Configure the IKEv2 proposal.
Step 3: Configure the IKEv2 policy.
Step 4: Configure the IKEv2 profile.
Step 5: Define the IPsec transform set.
Step 6: Configure the IPsec profile.
Step 7: Increase the IPsec anti-replay window size.
SPOKE ROUTER CONFIGURATION
Step 1: Configure the crypto keyring for pre-shared keys
Step 2: Configure the IKEv2 proposal.
Step 3: Configure the IKEv2 policy.
Step 4: Configure the IKEv2 profile.
Step 5: Define the IPsec transform set.
Step 6: Configure the IPsec profile.
Step 7: Increase the IPsec anti-replay window size.
Note: The steps outlined above was taken from Cisco’s IWAN deployment guide?
What’s the difference in using IKEv2 and ISAKMP?