Digi IX30 User Manual page 372

Virtual Private Networks (VPN)
n
n
n
14. Click Apply to save the configuration and apply the change.

Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX30
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
To create a new IPsec tunnel, see
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
n
schema. For example, for an IPsec tunnel named ipsec_example, change to the ipsec_
example node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable active recovery:
(config vpn ipsec tunnel ipsec_example)> surelink enable true
(config vpn ipsec tunnel ipsec_example)>
5. To configure the device to restart the interface when its connection is considered to have
failed:
IX30 User Guide
HTTP test: Tests connectivity by sending an HTTP or HTTPS GET request to the
URL specified in Web servers. The URL should take the format of http
[s]://hostname/[path].
Test DNS servers configured for this interface: Tests connectivity by sending a
DNS query to the DNS servers configured for this interface.
Test the interface status: The interface is considered to be down based on:
Down time: The amount of time that the interface can be down before this test
l
is considered to have failed.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and
take the format number{w|d|h|m|s}.
For example, to set Down time to ten minutes, enter 10m or 600s.
The default is 60 seconds.
Initial connection time: The amount of time to wait for an initial connection to
l
the interface before this test is considered to have failed.
Allowed values are any number of weeks, days, hours, minutes, or seconds, and
take the format number{w|d|h|m|s}.
For example, to set Initial connection time to ten minutes, enter 10m or 600s.
The default is 60 seconds.
Configure an IPsec tunnel.
IPsec
372