Digi IX10 User Manual page 194

Virtual Private Networks (VPN)
14. Click Apply to save the configuration and apply the change.

Command line
1. Log into the IX10 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
To create a new IPsec tunnel, see
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
n
schema. For example, for an IPsec tunnel named ipsec_example, change to the ipsec_
example node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable active recovery:
(config vpn ipsec tunnel ipsec_example)> connection_monitor enable true
(config vpn ipsec tunnel ipsec_example)>
5. To configure the device to restart the interface when its connection is considered to have
failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor restart true
(config vpn ipsec tunnel ipsec_example)>
This is useful for interfaces that may regain connectivity after restarting, such as a cellular
modem.
6. To configure the device to reboot when the interface is considered to have failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor reboot enable
(config vpn ipsec tunnel ipsec_example)>
7. Set the Interval between connectivity tests:
(config vpn ipsec tunnel ipsec_example)> connection_monitor interval value
(config vpn ipsec tunnel ipsec_example)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format
number{w|d|h|m|s}.
IX10 User Guide
Configure an IPsec tunnel.
IPsec
194