Cisco IOS XR Configuration Manual page 84

Configuration Examples for Implementing IKE Security Protocol
dot1q vlan 63
!
interface GigabitEthernet0/1/0/0.11
vrf FVRF
ipv4 address 10.0.91.1 255.255.255.0
dot1q vlan 91
!
interface GigabitEthernet0/1/0/0.12
vrf FVRF
ipv4 address 10.0.92.1 255.255.255.0
dot1q vlan 92
!
interface GigabitEthernet0/1/0/0.13
vrf FVRF
ipv4 address 10.0.93.1 255.255.255.0
dot1q vlan 93
interface service-ipsec15
vrf IVRF1
ipv4 address 115.115.115.115 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof15 tunnel vrf FVRF
tunnel source 10.20.100.15
interface service-ipsec16
vrf IVRF2
ipv4 address 116.116.116.116 255.255.0.0
service-location preferred-active 0/2/0
profile ipsec-prof16 tunnel vrf FVRF
tunnel source 10.20.100.16
tunnel destination 10.0.85.2
router static
address-family ipv4 unicast
address-family ipv4 unicast
10.0.0.0/16 10.0.83.1
crypto isakmp
crypto isakmp policy 60
authentication pre-share
hash sha
group 5
encryption aes
lifetime 86400
!
crypto keyring kr11 vrf FVRF
pre-shared-key address 10.0.91.2 255.255.255.255 key key-vrf
pre-shared-key address 10.0.92.2 255.255.255.255 key key-vrf
pre-shared-key address 10.0.93.2 255.255.255.255 key key-vrf
!
crypto keyring kr12 vrf FVRF
local-address 10.20.100.16
pre-shared-key address 0.0.0.0 0.0.0.0 key key16
!
crypto isakmp profile isakmp-prof6
keyring kr11
match identity address 10.0.91.2/32 vrf FVRF
match identity address 10.0.92.2/32 vrf FVRF
match identity address 10.0.93.2/32 vrf FVRF
!
!
Cisco IOS XR System Security Configuration Guide
SC-72
1.7.0.3/32 service-ipsec15
1.7.0.4/32 service-ipsec15
set interface service-ipsec15
set interface service-ipsec15
set interface service-ipsec15
Implementing Internet Key Exchange Security Protocol on Cisco IOS XR Software
vrf FVRF