Before we define the IPsec profile , we need to define the transform-set parameters that will be used for encrypting the data traffic.

ISR-LAB(config)#crypto ipsec transform-set TSET esp-aes 256 esp-sha256-hmac
mode tunnel

Now, we define the IPsec profile. Under the ipsec profile, we will reference the transform-set (TSET) as well as the ikev2 local profile.

ISR-LAB(config)#crypto ipsec profile ikev2-ipsec-profile
set transform-set TSET
set ikev2-profile ikev2-local-profile