Digi Connect EZ Mini - Page 303

Virtual Private Networks (VPN) Dynamic Multipoint VPN (DMVPN)
Digi Connect EZ Mini User Guide
303
d. Set the key to a four-octet value that matches the key on the remote endpoint. For
example:
(config vpn iptunnel dmvpn_tunnel)> key 1.1.1.1
(config vpn iptunnel dmvpn_tunnel)>
e. (Optional) Enable the device to reply to Cisco GRE keepalive packets:
(config vpn iptunnel dmvpn_tunnel)> keepalive true
(config vpn iptunnel dmvpn_tunnel)>
f. (Optional) Enable the device to allow packets destined for an address which is not explicitly
in the routing table to exit the IP tunnel:
(config vpn iptunnel dmvpn_tunnel)> open_routing true
(config vpn iptunnel dmvpn_tunnel)>
4. Assign an IP address to the IP tunnel:
a. Type ... to return to the top level of the configuration schema:
(config vpn iptunnel dmvpn_tunnel)> ...
(config)>
b. And a network interface. For example, to add an interface named dmvpn_tunnel_interface:
(config)> add network interface dmvpn_tunnel_interface
(config network interface dmvpn_tunnel_interface)>
c. Set the zone to internal:
(config network interface dmvpn_tunnel_interface)> zone internal
(config network interface dmvpn_tunnel_interface)>
d. Set the device to the IP tunnel created above:
(config network interface dmvpn_tunnel_interface)> device
/vpn/iptunnel/dmvpn_tunnel
(config network interface dmvpn_tunnel_interface)>
e. Set the IP address and netmask of the tunnel. The netmask must be set to /32. For
example, to set the IP address to 10.20.1.4/32:
(config network interface dmvpn_tunnel_interface)> ipv4 address
10.20.1.4/32
(config network interface dmvpn_tunnel_interface)>
5. Configure NHRP:
a. Type ... to return to the top level of the configuration schema:
(config network interface dmvpn_tunnel_interface)> ...
(config)>