How to combine multiple ikev2 proposal in to single policy

[Ramesh Babu]

Hi Team,

Our Router having many ikev2 proposal, as per TAC suggestion we need to combine in to single policy. Please let me know for this activity any down time needed ?

[MHM Cisco World]

Down time for existing VPN?

If yes No' there is no downtime.

Crypto ikev2 policy <name>

Proposal <name>1

Proposal <name>2

...etc

There is nothing happened to VPN that already active.

MHM

[Ramesh Babu]

Sure, Thanks for your help.

[balaji.bandi]

check below example guide :

https://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_ike2vpn/configuration/15-2mt/sec-cfg-ikev2-flex.html#GUID-496DF6C1-A9B8-4396-B6AF-7885243442A0

[Ramesh Babu]

Hi Sir,

One more doubt, how to verify which policy is used, because we are having few more policy as well. 

Policy having proposal & match address

[MHM Cisco World]

show crypto ikev2 sa <<- give the proposal and IP used 
MHM