Digi IX20 - Page 604

Virtual PrivateNetworks(VPN) Generic Routing Encapsulation (GRE)
IX20 User Guide
604
(config vpn ipsec tunnel ipsec_gre2)> auth secret testkey
(config vpn ipsec tunnel ipsec_gre2)>
5. Set the remote endpoint to public IPaddress of the IX20-1device:
(config vpn ipsec tunnel ipsec_gre2)> remote hostname 192.168.100.1
(config vpn ipsec tunnel ipsec_gre2)>
6. Add a policy:
(config vpn ipsec tunnel ipsec_gre2)> add policy end
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
7. Set the local network policy type to custom:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local type custom
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
8. Set the local network address to the IPaddressand subnet of the local GREtunnel,
172.30.0.2/32:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local custom 172.30.0.2/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
9. Set the remote network addressto the IPaddress and subnet of the remote GREtunnel,
172.30.0.1/32:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> remote network
172.30.0.1/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
10. Save the configuration and apply the change
(config vpn ipsec tunnel ipsec_gre2 policy 0)> save
Configuration saved.
>
Task two: Create an IPsec endpoint interface
 Web
1. Click Network >Interfaces.
2. For Add Interface, type ipsec_endpoint2 and click .