! Internet-facing Cisco ISR1111 for sss in sss


hostname sss-EDGE
!
interface GigabitEthernet0/0/0
 description DIRTY-INTERNET

 ip address dhcp
 no shutdown
ip route 0.0.0.0 0.0.0.0 dhcp


pppoe enable group global
interface Dialer1
 description PPPOE-DIRTY-INTERNET
 encapsulation ppp
 ppp chap hostname 
 ppp chap password 0 
 ip address negotiated
 no shutdown

!
crypto ikev2 proposal PARTNER-IKEV2
 encryption aes-gcm-256
 prf sha384
 group 20
crypto ikev2 policy PARTNER-IKEV2
 proposal PARTNER-IKEV2
crypto ikev2 keyring COUNTRY-CORE
 peer AU_CORE_EDGE
  identity key-id AU_CORE_EDGE
  pre-shared-key local 89jH2ZwuQwaPrC%XiqZxqH88G%HktIR@ovK6Z0@k
  pre-shared-key remote MKRrS940^H)zdf84c7mikPuN#6Y88x)sFg6nUmyZ
crypto ikev2 profile COUNTRY-CORE
 match identity remote key-id AU_CORE_EDGE
 identity local key-id sss_EDGE
 authentication local pre-share
 authentication remote pre-share
 keyring local COUNTRY-CORE
crypto ipsec transform-set PARTNER-GCM esp-gcm 256
 mode transport
crypto ipsec profile PARTNER-DMVPN
 set transform-set PARTNER-GCM
 set ikev2-profile COUNTRY-CORE
!
interface Tunnel65011
 description IKEV2-IPSEC-DMVPN-TO-AU-CORE
 ip address negotiated
 ip nhrp network-id 65011
 ip nhrp nhs 10.250.2.1
 ip nhrp shortcut
 tunnel source GigabitEthernet0/0/0
 tunnel mode gre multipoint
 tunnel key 65011
 tunnel protection ipsec profile PARTNER-DMVPN
 no shutdown
!
! Claimed child slot AU_SLOT_5: 10.42.1.64/28
end