! Internet-facing Cisco ISR1111 for sss in ssshostname sss-EDGE!interface GigabitEthernet0/0/0 description DIRTY-INTERNET ip address dhcp no shutdownip route 0.0.0.0 0.0.0.0 dhcppppoe enable group globalinterface Dialer1 description PPPOE-DIRTY-INTERNET encapsulation ppp ppp chap hostname ppp chap password 0 ip address negotiated no shutdown!crypto ikev2 proposal PARTNER-IKEV2 encryption aes-gcm-256 prf sha384 group 20crypto ikev2 policy PARTNER-IKEV2 proposal PARTNER-IKEV2crypto ikev2 keyring COUNTRY-CORE peer AU_CORE_EDGE identity key-id AU_CORE_EDGE pre-shared-key local 89jH2ZwuQwaPrC%XiqZxqH88G%HktIR@ovK6Z0@k pre-shared-key remote MKRrS940^H)zdf84c7mikPuN#6Y88x)sFg6nUmyZcrypto ikev2 profile COUNTRY-CORE match identity remote key-id AU_CORE_EDGE identity local key-id sss_EDGE authentication local pre-share authentication remote pre-share keyring local COUNTRY-COREcrypto ipsec transform-set PARTNER-GCM esp-gcm 256 mode transportcrypto ipsec profile PARTNER-DMVPN set transform-set PARTNER-GCM set ikev2-profile COUNTRY-CORE!interface Tunnel65011 description IKEV2-IPSEC-DMVPN-TO-AU-CORE ip address negotiated ip nhrp network-id 65011 ip nhrp nhs 10.250.2.1 ip nhrp shortcut tunnel source GigabitEthernet0/0/0 tunnel mode gre multipoint tunnel key 65011 tunnel protection ipsec profile PARTNER-DMVPN no shutdown!! Claimed child slot AU_SLOT_5: 10.42.1.64/28end