Table of Contents
Advertisement
Virtual Private Networks (VPN)
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
To create a new IPsec tunnel, see
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
n
schema. For example, for an IPsec tunnel named ipsec_example, change to the ipsec_
example node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable active recovery:
(config vpn ipsec tunnel ipsec_example)> surelink enable true
(config vpn ipsec tunnel ipsec_example)>
5. To configure the device to restart the interface when its connection is considered to have
failed:
(config vpn ipsec tunnel ipsec_example)> surelink restart true
(config vpn ipsec tunnel ipsec_example)>
This is useful for interfaces that may regain connectivity after restarting, such as a cellular
modem.
6. To configure the device to reboot when the interface is considered to have failed:
(config vpn ipsec tunnel ipsec_example)> surelink reboot enable
(config vpn ipsec tunnel ipsec_example)>
7. Set the Interval between connectivity tests:
(config vpn ipsec tunnel ipsec_example)> surelink interval value
(config vpn ipsec tunnel ipsec_example)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format
number{w|d|h|m|s}.
For example, to set interval to ten minutes, enter either 10m or 600s:
(config vpn ipsec tunnel ipsec_example)> surelink interval 600s
(config vpn ipsec tunnel ipsec_example)>
The default is 15 minutes.
8. Determine whether the interface should fail over based on the failure of one of the test targets,
or all of the test targets:
IX10 User Guide
Configure an IPsec
tunnel.
IPsec
289
Advertisement
Table of Contents
