NEC ZA-SA3500G Function Manual page 234

pre-shared-key remote hogehoge
!
crypto ikev2 profile ikev2profile
match identity remote address 10.0.1.1 255.255.255.255
authentication remote pre-share
authentication local pre-share
keyring local keys
lifetime 28800
!
crypto ipsec transform-set TS esp-aes 256 esp-sha-hmac
mode tunnel
!
crypto map cmap 10 ipsec-isakmp
set peer 10.0.1.1
set security-association lifetime seconds 28800
set transform-set TS
set ikev2-profile ikev2profile
match address 100
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
duplex auto
speed auto
no mop enabled
crypto map cmap
!
interface GigabitEthernet0/1
ip address 192.168.100.10 255.255.255.0
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 10.0.0.254
!
access-list 100 permit ip 192.168.100.0 0.0.0.255 192.168.110.0 0.0.0.255
234 Setting/Setting Confirmation|