Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 155

Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
ipv4 access-list acl-2_5-4
10 permit ipv4 host 2.6.1.3 host 1.7.1.3
vrf IVRF1
!
vrf IVRF2
!
vrf IVRF3
!
vrf FVRF
!
interface GigabitEthernet0/1/0/0.1
vrf FVRF
ipv4 address 10.0.83.2 255.255.255.0
!
interface GigabitEthernet0/1/0/1.1
vrf IVRF1
ipv4 address 2.6.0.1 255.255.0.0
dot1q vlan 61
!
interface GigabitEthernet0/1/0/1.2
vrf IVRF2
ipv4 address 2.6.1.1 255.255.0.0
dot1q vlan 62
!
interface GigabitEthernet0/1/0/1.3
vrf IVRF3
ipv4 address 2.6.0.1 255.255.0.0
dot1q vlan 63
!
interface GigabitEthernet0/1/0/0.11
vrf FVRF
ipv4 address 10.0.91.1 255.255.255.0
dot1q vlan 91
!
interface GigabitEthernet0/1/0/0.12
vrf FVRF
ipv4 address 10.0.92.1 255.255.255.0
dot1q vlan 92
!
interface GigabitEthernet0/1/0/0.13
vrf FVRF
ipv4 address 10.0.93.1 255.255.255.0
dot1q vlan 93
interface service-ipsec15
vrf IVRF1
ipv4 address 115.115.115.115 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof15 tunnel vrf FVRF
tunnel source 10.20.100.15
interface service-ipsec16
vrf IVRF2
ipv4 address 116.116.116.116 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof16 tunnel vrf FVRF
tunnel source 10.20.100.16
tunnel destination 10.0.85.2
router static
address-family ipv4 unicast
vrf FVRF
address-family ipv4 unicast
OL-20382-01
1.7.0.3/32 service-ipsec15
1.7.0.4/32 service-ipsec15
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
Configuration Examples for Implementing IKE Security Protocol
SC-149