Digi IX20 - Page 613

Virtual PrivateNetworks(VPN) Dynamic Multipoint VPN(DMVPN)
IX20 User Guide
613
/network/interface/defaultip
/network/interface/defaultlinklocal
/network/interface/eth1
/network/interface/eth2
/network/interface/loopback
Current value:
(config vpn iptunnel dmvpn_tunnel)> local
ii. Set the interface. For example:
(config vpn iptunnel dmvpn_tunnel)> local /network/interface/eth1
(config vpn iptunnel dmvpn_tunnel)>
d. Set the key to a four-octet value that matches the key on the remote endpoint. For
example:
(config vpn iptunnel dmvpn_tunnel)> key 1.1.1.1
(config vpn iptunnel dmvpn_tunnel)>
e. (Optional) Enable the device to reply to Cisco GREkeepalivepackets:
(config vpn iptunnel dmvpn_tunnel)> keepalive true
(config vpn iptunnel dmvpn_tunnel)>
f. (Optional) Enable the device to allow packetsdestined for an address which is not
explicitly in the routing table to exit the IPtunnel:
(config vpn iptunnel dmvpn_tunnel)> open_routing true
(config vpn iptunnel dmvpn_tunnel)>
4. Assign an IPaddressto the IPtunnel:
a. Type ... to return to the top level of the configuration schema:
(config vpn iptunnel dmvpn_tunnel)> ...
(config)>
b. And a network interface. For example, to add an interface named dmvpn_tunnel_interface:
(config)> add network interface dmvpn_tunnel_interface
(config network interface dmvpn_tunnel_interface)>
c. Set the zone to internal:
(config network interface dmvpn_tunnel_interface)> zone internal
(config network interface dmvpn_tunnel_interface)>
d. Set the device to the IPtunnel created above:
(config network interface dmvpn_tunnel_interface)> device
/vpn/iptunnel/dmvpn_tunnel
(config network interface dmvpn_tunnel_interface)>