Digi IX20 - Page 509

Virtual PrivateNetworks(VPN) IPsec
IX20 User Guide
509
b. Use the ?to determine available options:
(config)> vpn ipsec advanced ?
Advanced: Advanced configuration that applies to all IPsec tunnels.
Parameters Current Value
---------------------------------------------------------------------
---------
debug none Debug level
ike_fragment_size 1280 Maximum IKE fragment size
ike_retransmit_tries 5 IKE retransmit tries
keep_alive 40s NAT keep alive time
Additional Configuration
---------------------------------------------------------------------
----------
connection_retry_timeout Connection retry timeout
connection_try_interval Connection try interval
ike_timeout IKE timeout
(config)>
Generally, the default settings for these should besufficient.
c. You can also enable debugging for IPsec:
(config)> vpn ipsec advanced debug value
(config)>
where value is one of:
n
none
n
basic_auditing
n
detailed_control
n
generic_control
n
raw_data
n
sensitive_data
20. Save the configuration and apply the change
(config)> save
Configuration saved.
>
21. Typeexit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.