Table of Contents
Advertisement
Virtual Private Networks (VPN)
9. (Optional) Set the management priority for this IPsec tunnel:
(config vpn ipsec tunnel ipsec_example)> mgmt value
(config vpn ipsec tunnel ipsec_example)>
where value is any interger between 0 and 1000.
10. Set the authentication type:
(config vpn ipsec tunnel ipsec_example)> auth type value
(config vpn ipsec tunnel ipsec_example)>
where value is one of:
secret: Uses a pre-shared key (PSK) to authenticate with the remote peer.
n
a. Set the pre-shared key:
rsasig: Uses a private RSA key to authenticate with the remote peer.
n
a. For the private_key parameter, paste the device's private RSA key in PEM format:
b. Set the private key passphrase that is used to decrypt the private key. Leave blank
c. For the peer_public_key parameter, paste the peer's public RSA key in PEM
x509: Uses private key and X.509 certificates to authenticate with the remote peer.
n
a. For the private_key parameter, paste the device's private RSA key in PEM format:
b. Set the private key passphrase that is used to decrypt the private key. Leave blank
c. For the cert parameter, paste the local X.509 certificate in PEM format:
Digi Connect IT® Mini User Guide
(config vpn ipsec tunnel ipsec_example)> auth secret key
(config vpn ipsec tunnel ipsec_example)>
(config vpn ipsec tunnel ipsec_example)> auth private_key key
(config vpn ipsec tunnel ipsec_example)>
if the private key is not encrypted.
(config vpn ipsec tunnel ipsec_example)> auth private_key_passphrase passphrase
(config vpn ipsec tunnel ipsec_example)>
format:
(config vpn ipsec tunnel ipsec_example)> auth peer_public_key key
(config vpn ipsec tunnel ipsec_example)>
(config vpn ipsec tunnel ipsec_example)> auth private_key key
(config vpn ipsec tunnel ipsec_example)>
if the private key is not encrypted.
(config vpn ipsec tunnel ipsec_example)> auth private_key_passphrase passphrase
(config vpn ipsec tunnel ipsec_example)>
(config vpn ipsec tunnel ipsec_example)> auth cert certificate
(config vpn ipsec tunnel ipsec_example)>
IPsec
197
Advertisement
Table of Contents
