Table of Contents
Advertisement
Virtual Private Networks (VPN)
status.
Format:
primary_ipsec_tunnel
backup_ipsec_tunnel
Optional: yes
Current value:
(config vpn ipsec tunnel backup_ipsec_tunnel)> ipsec_failover
b. Set the primary IPsec tunnel:
(config vpn ipsec tunnel backup_ipsec_tunnel)> ipsec_failover primary_
ipsec_tunnel
(config vpn ipsec tunnel backup_ipsec_tunnel)>
Configure SureLink active recovery for IPsec
You can configure the Connect EZ device to regularly probe IPsec tunnels to determine if the
connection has failed and take remedial action.
You can also configure the IPsec tunnel to fail over to a backup tunnel. See
further information.
Required configuration items
A valid IPsec configuration. See
n
Enable IPsec active recovery.
n
The behavior of the Connect EZ device upon IPsec failure: either
n
Restart the IPsec interface
l
Reboot the device.
l
Additional configuration items
The interval between connectivity tests.
n
Whether the interface should be considered to have failed if one of the test targets fails, or all
n
of the test targets fail.
The number of probe attempts before the IPsec connection is considered to have failed.
n
The amount of time that the device should wait for a response to a probe attempt before
n
considering it to have failed.
To configure the Connect EZ device to regularly probe the IPsec connection:
WebUI
Digi Connect EZ Mini User Guide
Configure an IPsec tunnel
Configure IPsec failover
for configuration instructions.
IPsec
for
153
Advertisement
Table of Contents
