Digi TransPort LR54 - Example: GRE Tunnel over an Ipsec Tunnel

Virtual Private Networks (VPN) Generic Routing Encapsulation (GRE)
Digi TransPort WR Routers User Guide
225
Example: GRE tunnel over an IPSec tunnel
In order to support GRE over an IPsec tunnel, a LAN interface needs to be configured on each device.
The LANinterface will have an IP address and no interfaces. These LAN interfaces are then configured
as the IPsec local and remote networks, and as the GREpeers.
In the following example, LAN 10 is being used.
Web
Example configuration steps for the first TransPort device:
1. Configure the LAN 10 interface:
a. On the menu, click Network > Networks > LANs.
b. Click New Network.
c. For Select Network, select 10.
d. In the IPv4 group, set the IP address and netmask, for example:
n IP Address: 172.168.0.1
n Netmask: 255.255.255.255
e. Expand the DHCP Server group and disable the DHCP server.
f. Click Apply.
2. Configure the IPsec tunnel:
a. On the menu, click Network> Networks > IPsec.
b. Click New IPsec Tunnel.
c. Complete the following fields:
n IPsec Pre-Shared Key: key
n Local IP Network: LAN 10
n Local Identifier: lr54-1
n Remote Peer IP Address or Name: 10.20.1.1
n Remote IP Network: 172.168.0.2
n Remote IP Network Mask: 255.255.255.255
n Remote Identifier: lr54-2
d. Click Apply.
3. Configure the GREtunnel:
a. On the menu, click Network > Services > GRE.
b. Click New GRE Tunnel.