Virtual PrivateNetworks(VPN) NEMO
IX20 User Guide
640
6. Set the key used to authenticate to the home agent. Thisis provided by your cellular carrier.
(config vpn nemo nemo_example)> key value
(config vpn nemo nemo_example)>
7. Set the the number of secondsnumber of secondsuntil the authorization key expires. This is
provided by your cellular carrier.
(config vpn nemo nemo_example)> lifetime integer
(config vpn nemo nemo_example)>
Allowed values are any integer between 1 and 65535.
8. MTU discovery isenabled by default, which allowsthe device to determine the maximum
transmission unit (MTU) size. To disable:
(config vpn nemo nemo_example)> mtu_discovery false
(config vpn nemo nemo_example)>
If disabled, set the MTU size. Thedefault MTU size for LANs on the IX20 device is 1500. TheMTU
size of the NEMOtunnel will be smaller, to take into account the required headers.
(config vpn nemo nemo_example)> mtu integer
(config vpn nemo nemo_example)>
Allowed values are any integer between 68 and 1476.
9. Set the Security Parameter Index (SPI) value, which is used in the authentication extension
when registering. Thisshould be normally left at the default setting of 256 unlessyour service
provider indicatesa different value.
(config vpn nemo nemo_example)> spi integer
(config vpn nemo nemo_example)>
Allowed values are any integer between 256 and 4294967295.
10. Set the firewall zone for the NEMOtunnel to internal:
(config vpn nemo nemo_example)> zone internal
(config vpn nemo nemo_example)>
The Internal firewall zone configures the IX20 device to trust traffic going to the tunnel and
allowsit through the network.
11. Configure the Care-of-Address, the local WAN interfaceof the internet facing network.
a. Set the method to determine the Care-of-Address:
(config vpn nemo nemo_example)> coaddress type value
(config vpn nemo nemo_example)>
where value is one of:
n
defaultroute: Uses the same network interface as the default route.
n
interface
If interface is used, set the interface:
To Next Page
Loading...
Need help?
General