Digi Connect IT 16 User Manual

Virtual Private Networks (VPN) Generic Routing Encapsulation (GRE)
Digi Connect IT® 16/48 User Guide
315
1. Log into the Connect IT 16/48 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Add an IPsec tunnel named ipsec_gre2:
(config)> add vpn ipsec tunnel ipsec_gre2
(config vpn ipsec tunnel ipsec_gre2)>
4. Set the pre-shared key to the same pre-shared key that was configured for the Connect IT
16/48-1 (testkey):
(config vpn ipsec tunnel ipsec_gre2)> auth secret testkey
(config vpn ipsec tunnel ipsec_gre2)>
5. Set the remote endpoint to public IP address of the Connect IT 16/48-1 device:
(config vpn ipsec tunnel ipsec_gre2)> remote hostname 192.168.100.1
(config vpn ipsec tunnel ipsec_gre2)>
6. Add a policy:
(config vpn ipsec tunnel ipsec_gre2)> add policy end
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
7. Set the local network policy type to custom:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local type custom
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
8. Set the local network address to the IP address and subnet of the local GRE tunnel,
172.30.0.2/32:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local custom 172.30.0.2/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
9. Set the remote network address to the IP address and subnet of the remote GRE tunnel,
172.30.0.1/32:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> remote network 172.30.0.1/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
10. Save the configuration and apply the change:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> save
Configuration saved.
>
Task two: Create an IPsec endpoint interface
WebUI

Digi Connect IT 16 Specifications

General

Brand	Digi
Model	Connect IT 16
Category	Server
Language	English