IKEv2 Configuration

Describes how to configure IPsec tunnels on Cisco ISR running Cisco IOS 15.5(3) or later version using IKEv2.

Note: Forcepoint ONE SSE recommends to use IKEv2 to configure your Cisco device.

You need to configure the primary tunnel and secondary tunnel on the Cisco ISR router. However, only the primary tunnel will be routing the traffic unless the primary tunnel is down or broken. In such cases, secondary tunnel routes the traffic until the primary tunnel is up and working properly.