Table of Contents
Advertisement
Virtual Private Networks (VPN)
Format:
primary_ipsec_tunnel
backup_ipsec_tunnel
Optional: yes
Current value:
(config vpn ipsec tunnel backup_ipsec_tunnel)> ipsec_failover
b. Set the primary IPsec tunnel:
(config vpn ipsec tunnel backup_ipsec_tunnel)> ipsec_failover primary_ipsec_tunnel
(config vpn ipsec tunnel backup_ipsec_tunnel)>
4. Save the configuration and apply the change:
(config vpn ipsec tunnel backup_ipsec_tunnel)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
Configure SureLink active recovery for IPsec
You can configure the Connect IT Mini device to regularly probe IPsec client connections to determine
if the connection has failed and take remedial action.
You can also configure the IPsec tunnel to fail over to a backup tunnel. See
further information.
Required configuration items
A valid IPsec configuration. See
n
Enable IPsec active recovery.
n
The behavior of the Connect IT Mini device upon IPsec failure: either
n
Restart the IPsec interface
l
Reboot the device.
l
Additional configuration items
The interval between connectivity tests.
n
Whether the interface should be considered to have failed if one of the test targets fails, or all
n
of the test targets fail.
The number of probe attempts before the IPsec connection is considered to have failed.
n
The amount of time that the device should wait for a response to a probe attempt before
n
considering it to have failed.
To configure the Connect IT Mini device to regularly probe the IPsec connection:
É
WebUI
Digi Connect IT® Mini User Guide
Configure an IPsec tunnel
Configure IPsec failover
for configuration instructions.
IPsec
for
209
Advertisement
Table of Contents
