Digi IX10 User Manual page 186

Virtual Private Networks (VPN)
(config vpn ipsec tunnel ipsec_example nat 0)> dst value
(config vpn ipsec tunnel ipsec_example nat 0)>
18. Configure policies that define the network traffic that will be encapsulated by this tunnel:
a. Change to the root of the configuration schema:
(config vpn ipsec tunnel ipsec_example nat 0)> ...
(config)>
b. Add a policy:
(config)> add vpn ipsec tunnel ipsec_example policy end
(config vpn ipsec tunnel ipsec_example policy 0)>
c. Set the type of local network policy:
(config vpn ipsec tunnel ipsec_example policy 0)> local type value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is one of:
n
n
n
n
d. Set the IP address and optional netmask of the remote network. The keyword any can
also be used.
IX10 User Guide
address: The address of a local network interface.
Set the address:
i. Use the ? to determine available interfaces:
ii. Set the interface. For example:
(config vpn ipsec tunnel ipsec_example policy 0)> local
address eth1
(config vpn ipsec tunnel ipsec_example policy 0)>
network: The subnet of a local network interface.
Set the network:
i. Use the ? to determine available interfaces:
ii. Set the interface. For example:
(config vpn ipsec tunnel ipsec_example policy 0)> local
network eth1
(config vpn ipsec tunnel ipsec_example policy 0)>
custom: A user-defined network.
Set the custom network:
(config vpn ipsec tunnel ipsec_example policy 0)> local custom
value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is the IPv4 address and optional netmask. The keyword any can also
be used.
request: Requests a network from the remote peer.
IPsec
186