Adding A Connection - Siemens RUGGEDCOM ROX II User Manual

Chapter 5
Setup and Configuration
!
esp algorithm aes256 sha1
!
left
public-ip type default-route
subnet 192.168.11.0/24
!
!
right
public-ip type any
!
!
!
!
If no connections have been configured, add connections as needed. For more information, refer to
Section 5.29.6.2, "Adding a
Section 5.29.6.2

Adding a Connection

To add a new connection for a VPN, do the following:
1. Make sure the CLI is in Configuration mode.
2. Add the connection by typing:
tunnel ipsec connection name
Where:
• name is the connection name. If the name is default, this makes it the default setting for all connections.
3. Configure the following parameter(s) as required:
Parameter
startup { startup }
authenticate { authenticate }
connection-type { connection-type }
address-family { address-family }
464
Connection".
Description
Synopsis: { ignore, add, start, route, default }
Default: default
The action to take when IPsec is initialized. The default value is
'ignore' unless overwritten by the default connection setting.
Synopsis: { default, rsasig, secret }
Default: default
The authentication method. The default value is 'default' unless
overwritten by the default connection setting.
Synopsis: { tunnel, transport, passthrough, default }
Default: default
The connection type/mode. Options include:
<itemizedlist><listitem>tunnel: Encrypts traffic on host-to-
host, host-to-subnet or subnet-to-subnet tunnels. This is the
default type/mode unless overwritten by the default connection
setting.</listitem> <listitem>transport: Encrypts traffic on a host-
to-host tunnel.</listitem> <listitem>passthrough: Traffic is not
encrypted.</listitem></itemizedlist>
Synopsis: { ipv4, ipv6 }
Default: ipv4
The address-family to run for the connection. Accepted values
include 'ipv4' (default) and 'ipv6'. All addresses used in the
connection must have the same address family.
RUGGEDCOM ROX II
CLI User Guide
Adding a Connection