Digi IX20 - Page 499

Virtual PrivateNetworks(VPN) IPsec
IX20 User Guide
499
n
round_robin: Attempts to connect to hostnamessequentially based on the list
order.
n
random: Randomly selects an IPsec peer to connect to from the hostname list.
n
priority: Selects the first hostname in the list that is resolvable.
c. Set the IDtype:
(config vpn ipsec tunnel ipsec_example)> remote id type value
(config vpn ipsec tunnel ipsec_example)>
where value is one of:
n
auto: The IDwill be automatically determined from the value of the tunnels
endpoints.
n
raw: Enter an ID and have it passed unmodified to the underlying IPsec stack.
Set the unmodified IDthat will be passed:
(config vpn ipsec tunnel ipsec_example)> remote id type raw_id
id
(config vpn ipsec tunnel ipsec_example)>
n
any: Any IDwill be accepted.
n
ipv4: The IDwill be interpreted as an IPv4 address and sent as an ID_IPV4_ADDR
IKEidentity.
Set an IPv4 formatted ID. Thiscan be a fully-qualified domain name or an IPv4
address.
(config vpn ipsec tunnel ipsec_example)> remote id type ipv4_id
id
(config vpn ipsec tunnel ipsec_example)>
n
ipv6: The IDwill be interpreted as an IPv6 address and sent as an ID_IPV6_ADDR
IKEidentity.
Set an IPv6 formatted ID. Thiscan be a fully-qualified domain name or an IPv6
address.
(config vpn ipsec tunnel ipsec_example)> remote id type ipv6_id
id
(config vpn ipsec tunnel ipsec_example)>
n
rfc822: The IDwill be interpreted as an RFC822 (email address).
Set the ID in internet email addressformat:
(config vpn ipsec tunnel ipsec_example)> remote id type rfc822_
id id
(config vpn ipsec tunnel ipsec_example)>
n
fqdn: The IDwill be interpreted as FQDN (Fully Qualified Domain Name) and sent as
an ID_FQDN IKEidentity.