Digi IX10 User Manual page 348

Virtual Private Networks (VPN)
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
To create a new IPsec tunnel, see
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
n
schema. For example, for an IPsec tunnel named ipsec_example, change to the ipsec_
example node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable SureLink:
(config vpn ipsec tunnel ipsec_example)> surelink enable true
(config vpn ipsec tunnel ipsec_example)>
5. By default, the Test DNS servers configured for this interface test is automatically
configured and enabled. This tests communication with DNS servers that are either provided
by DHCP, or statically configured for this interface.
To add additional tests:
a. Add a test:
(config vpn ipsec tunnel ipsec_example)> add surelink tests end
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
b. New tests are enabled by default. To disable:
(config vpn ipsec tunnel ipsec_example surelink tests 1)> enable false
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
c. Create a label for the test:
(config vpn ipsec tunnel ipsec_example surelink tests 1)> label string
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
d. if the test should apply to both IPv6 rather than IPv4, enable IPv6:
(config vpn ipsec tunnel ipsec_example surelink tests 1)> ipv6 true
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
e. Set the test type:
(config vpn ipsec tunnel ipsec_example surelink tests 1)> test value
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
where value is one of:
n
IX10 User Guide
ping: Uses ICMP to determine connectivity.
If ping is selected, complete the following:
Configure an IPsec tunnel.
IPsec
348