Digi IX10 User Manual page 177

Virtual Private Networks (VPN)
(config vpn ipsec tunnel ipsec_example)> metric value
(config vpn ipsec tunnel ipsec_example)>
where value is any integer between 0 and 65535.
7. Set the mode:
(config vpn ipsec tunnel ipsec_example)> mode mode
(config vpn ipsec tunnel ipsec_example)>
where mode is either:
tunnel: The entire IP packet is encrypted and/or authenticated and then encapsulated
n
as the payload in a new IP packet.
transport: Only the payload of the IP packet is encrypted and/or authenticated. The IP
n
header is unencrypted.
The default is tunnel.
8. Set the protocol:
(config vpn ipsec tunnel ipsec_example)> type protocol
(config vpn ipsec tunnel ipsec_example)>
where protocol is either:
esp (Encapsulating Security Payload): Provides encryption as well as authentication and
n
integrity.
ah (Authentication Header): Provides authentication and integrity only.
n
The default is esp.
9. (Optional) Set the management priority for this IPsec tunnel:
(config vpn ipsec tunnel ipsec_example)> mgmt value
(config vpn ipsec tunnel ipsec_example)>
where value is any interger between 0 and 1000.
10. Set the authentication type:
(config vpn ipsec tunnel ipsec_example)> auth type value
(config vpn ipsec tunnel ipsec_example)>
where value is one of:
secret: Uses a pre-shared key (PSK) to authenticate with the remote peer.
n
a. Set the pre-shared key:
rsasig: Uses a private RSA key to authenticate with the remote peer.
n
a. For the private_key parameter, paste the device's private RSA key in PEM format:
IX10 User Guide
(config vpn ipsec tunnel ipsec_example)> auth secret key
(config vpn ipsec tunnel ipsec_example)>
(config vpn ipsec tunnel ipsec_example)> auth private_key key
(config vpn ipsec tunnel ipsec_example)>
IPsec
177