Cisco ASR 5000 Series Administration Manual page 67

Sample Femto Network Gateway Configuration File
# Create the crypto template
configure
context <fng_context_name>
# Create the FNG service
configure
context <fng_context_name>
default
<crypto_template_name>
# Create the Egress context
OL-24872-01
mode tunnel
exit
crypto template <crypto_template_name> ikev2-subscriber
certificate <name>
natt
authentication eap profile <eap_profile_name>
ikev2-ikesa transform-set list <ikev2_ikesa_tset1>
payload <payload_name_1> match childsa
ip-address-allocation dynamic
ipsec transform-set list <ipsec_tset1>
exit
payload <payload_name_2> match childsa
ipsec transform-set list <ipsec_tset1>
exit
ikev2-ikesa keepalive-user-activity
ikev2-ikesa policy error-notification
end
fng-service <fng_service_name>
aaa authentication context-name <fng_context_name> aaa group
bind address <ip_address> crypto-template
end
Cisco ASR 5000 Series Femto Network Gateway Administration Guide ▄
Sample FNG Configuration ▀
67