Digi IX40 User Manual page 391

Virtual Private Networks (VPN)
For example, to set Backoff interval to ten minutes, enter 10m or 600s.
The default is 300 seconds.
d. Test interface gateway by pinging is used by the Interface gateway Ping test as the
endpoint for traceroute to use to determine the interface gateway. The default is 8.8.8.8,
and should only be changed if this IP address is not accessible due to networking issues.
14. Click Apply to save the configuration and apply the change.
Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX40
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
To create a new IPsec tunnel, see
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
n
schema. For example, for an IPsec tunnel named ipsec_example, change to the ipsec_
example node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable SureLink:
(config vpn ipsec tunnel ipsec_example)> surelink enable true
(config vpn ipsec tunnel ipsec_example)>
5. By default, the Test DNS servers configured for this interface test is automatically
configured and enabled. This tests communication with DNS servers that are either provided
by DHCP, or statically configured for this interface.
To add additional tests:
a. Add a test:
(config vpn ipsec tunnel ipsec_example)> add surelink tests end
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
b. New tests are enabled by default. To disable:
(config vpn ipsec tunnel ipsec_example surelink tests 1)> enable false
(config vpn ipsec tunnel ipsec_example surelink tests 1)>
IX40 User Guide
Configure an IPsec tunnel.
IPsec
391