Table of Contents
Advertisement
Virtual Private Networks (VPN)
n
n
n
c. Set the ID type:
(config vpn ipsec tunnel ipsec_example)> remote id type value
(config vpn ipsec tunnel ipsec_example)>
where value is one of:
n
n
n
n
n
n
n
IX20 User Guide
round_robin: Attempts to connect to hostnames sequentially based on the list
order.
random: Randomly selects an IPsec peer to connect to from the hostname list.
priority: Selects the first hostname in the list that is resolvable.
auto: The ID will be automatically determined from the value of the tunnels
endpoints.
raw: Enter an ID and have it passed unmodified to the underlying IPsec stack.
Set the unmodified ID that will be passed:
(config vpn ipsec tunnel ipsec_example)> remote id type raw_id
id
(config vpn ipsec tunnel ipsec_example)>
any: Any ID will be accepted.
ipv4: The ID will be interpreted as an IPv4 address and sent as an ID_IPV4_ADDR
IKE identity.
Set an IPv4 formatted ID. This can be a fully-qualified domain name or an IPv4
address.
(config vpn ipsec tunnel ipsec_example)> remote id type ipv4_id
id
(config vpn ipsec tunnel ipsec_example)>
ipv6: The ID will be interpreted as an IPv6 address and sent as an ID_IPV6_ADDR
IKE identity.
Set an IPv6 formatted ID. This can be a fully-qualified domain name or an IPv6
address.
(config vpn ipsec tunnel ipsec_example)> remote id type ipv6_id
id
(config vpn ipsec tunnel ipsec_example)>
rfc822: The ID will be interpreted as an RFC822 (email address).
Set the ID in internet email address format:
(config vpn ipsec tunnel ipsec_example)> remote id type rfc822_
id id
(config vpn ipsec tunnel ipsec_example)>
fqdn: The ID will be interpreted as FQDN (Fully Qualified Domain Name) and sent as
an ID_FQDN IKE identity.
IPsec
306
Advertisement
Table of Contents
