Digi IX10 User Manual page 445

Virtual Private Networks (VPN)
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX10
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create an IP tunnel.
a. Add an IP tunnel. For example, to add a tunnel named dmvpn_tunnel:
(config)> add vpn iptunnel dmvpn_tunnel
(config vpn iptunnel dmvpn_tunnel)>
b. Set the type to multipoint:
(config vpn iptunnel dmvpn_tunnel)> type multipoint
(config vpn iptunnel dmvpn_tunnel)>
c. Set the local interface:
i. Use the ? to determine available interfaces:
ii. Set the interface. For example:
(config vpn iptunnel dmvpn_tunnel)> local /network/interface/eth1
(config vpn iptunnel dmvpn_tunnel)>
d. Set the key to a four-octet value that matches the key on the remote endpoint. For
example:
(config vpn iptunnel dmvpn_tunnel)> key 1.1.1.1
(config vpn iptunnel dmvpn_tunnel)>
4. Assign an IP address to the IP tunnel:
a. Type ... to return to the top level of the configuration schema:
(config vpn iptunnel dmvpn_tunnel)> ...
(config)>
b. And a network interface. For example, to add an interface named dmvpn_tunnel_
interface:
(config)> add network interface dmvpn_tunnel_interface
(config network interface dmvpn_tunnel_interface)>
c. Set the zone to internal:
(config network interface dmvpn_tunnel_interface)> zone internal
(config network interface dmvpn_tunnel_interface)>
IX10 User Guide
Dynamic Multipoint VPN (DMVPN)
445