IP tunnels

This section describes IPSec secured interface over cellular functionality:

For general information about IP tunnel support, see the topics listed below in the "IP tunnels" chapter of the 7450 ESS, 7750 SR, and VSR Multiservice ISA and ESA Guide.

• IP tunnels overview

  • Tunnel ISAs

  • Operational conditions

  • Statistics collection

  • Security

  • IKEv2

  • SHA2 support

  • IPSec client lockout

  • IPSec tunnel CHILD_SA rekey

  • Multiple IKE/ESP transform support

• Using certificates for IPSec tunnel authentication

• Trust-anchor profile

• Cert-profile

• IPSec deployment requirements

• IKEv2 remote-access tunnel

• Secured interface

• Configuring IPSec with CLI

To configure and enable IP tunnels, the virtualized tunnel ISA MDA (isa-tunnel-v) must be configured in slot 5 on the router. See the 7705 SAR-Hm and SAR-Hmc Interface Configuration Guide for information.