FlexVPN Smart Defaults Tidbit

FlexVPN is built on using IKEv2. The smart defaults is a feature that aides in simplifying FlexVPN configuration. You are able to customize smart defaults. However, it is not always necessarily best practice. To view the default values of IKEv2 Smart Defaults:

View IKEv2 default Proposal:

View IKEv2 default Authorization Policy:

View IKEv2 default Policy:

View default IPsec Transform Set:

Note: default tunnel mode is always transport when referencing Smart Defaults IPsec transform-set; All other transform-sets default to tunnel mode;

View default IPsec Profile:


Recent Posts

See All

Dual Hub FlexVPN Error Tidbit

Sharing an issue that took me some time to troubleshoot & figure out in my dual hub single cloud FlexVPN lab/post (see here: Configuring & Verifying FlexVPN Redundancy with Dual Hub & Single Cloud). S

FlexVPN Redundancy Tidbit

I want to cover the most commonly used FlexVPN redundancy designs since I intend on building out a few scenarios to play with for studying purposes. The most common designs include: Dual cloud approa

IKEv2 Configuration Payload Tidbit

In this tidbit I want to cover what IKEv2 configuration payloads are & why they are needed. So it is sometimes desirable for the hub in hub & spoke topologies to provide configuration data to the spo


© 2023 by Train of Thoughts. Proudly created with Wix.com