IP tunnels

This section describes IPSec secured interface over cellular functionality:

For general information about IP tunnel support, see the following topics in the 7450 ESS, 7750 SR, and VSR Multiservice ISA and ESA Guide, "IP tunnels":

  • IP tunnels overview

    • Tunnel ISAs

    • Operational conditions

    • Statistics collection

    • Security

    • IKEv2

    • SHA2 support

    • IPSec client lockout

    • IPSec tunnel CHILD_SA rekey

    • Multiple IKE/ESP transform support

  • Using certificates for IPSec tunnel authentication

  • Trust-anchor profile

  • Cert-profile

  • IPSec deployment requirements

  • IKEv2 remote-access tunnel

  • Secured interface

  • Configuring IPSec with CLI

To configure and enable IP tunnels, the virtualized tunnel ISA MDA (isa-tunnel-v) must be configured in slot 5 or 6 on the router. See the 7705 SAR-Hm and SAR-Hmc Interface Configuration Guide for information.