description wireguard over asymmetric ports addrouter r1 int ser1 ser - $1a$ $1b$ ! vrf def v1 rd 1:1 exit int ser1 vrf for v1 ipv4 addr 1.1.1.1 255.255.255.0 ipv6 addr 1234::1 ffff:: exit crypto ipsec ips key EFw2rJEdqFGDgC80um3fwMmAafwqXno+PsbMHPZ0umM=M6vDV8QdiWDQppVKjKf8xjoKtyGAeRK/Ue48kwKI5Ss= exit int tun1 tunnel vrf v1 tunnel prot ips tunnel key 1234 4321 tunnel mode wireguard tunnel source ser1 tunnel destination 1.1.1.2 vrf for v1 ipv4 addr 2.2.2.1 255.255.255.0 ipv6 addr 4321::1 ffff:: exit ! addrouter r2 int ser1 ser - $1b$ $1a$ ! vrf def v1 rd 1:1 exit int ser1 vrf for v1 ipv4 addr 1.1.1.2 255.255.255.0 ipv6 addr 1234::2 ffff:: exit crypto ipsec ips key 6JhyvKPutQ9DNLupOPmDnQLRWtUWlUjI6PTJ/IZ9l1w=bQMmpCaGVyq9f+v48XGmfH5DMLytkqziID+rBH+qQic= exit int tun1 tunnel vrf v1 tunnel prot ips tunnel key 4321 1234 tunnel mode wireguard tunnel source ser1 tunnel destination 1.1.1.1 vrf for v1 ipv4 addr 2.2.2.2 255.255.255.0 ipv6 addr 4321::2 ffff:: exit ! r1 tping 100 5 2.2.2.2 vrf v1 r2 tping 100 5 2.2.2.1 vrf v1 r1 tping 100 5 4321::2 vrf v1 r2 tping 100 5 4321::1 vrf v1