Digi TransPort LR54 - Page 228

Virtual Private Networks (VPN) Generic Routing Encapsulation (GRE)
Digi TransPort WR Routers User Guide
228
Command line
Example configuration steps for the first TransPort device:
1. Configure the LAN 10 interface:
digi.router> lan 10 ip-address 172.168.0.1
digi.router> lan 10 mask 255.255.255.255
digi.router> lan 10 state on
2. Configure the IPsec tunnel:
digi.router> ipsec 1 peer 10.20.1.1
digi.router> ipsec 1 local-id lr54-1
digi.router> ipsec 1 local-network 172.168.0.1
digi.router> ipsec 1 local-mask 255.255.255.255
digi.router> ipsec 1 remote-id lr54-2
digi.router> ipsec 1 remote-network 172.168.0.2
digi.router> ipsec 1 remote-mask 255.255.255.255
digi.router> ipsec 1 psk key
digi.router> ipsec 1 state on
3. Configure the GREtunnel:
digi.router> gre 1 ip-address 172.168.1.1
digi.router> gre 1 mask 255.255.255.252
digi.router> gre 1 peer 172.168.0.2
digi.router> gre 1 state on
4. Add a route for the remote LAN 1 network:
digi.router> route 1 destination 192.168.48.0
digi.router> route 1 mask 255.255.255.0
digi.router> route 1 interface gre1
5. Add a filter to allow data from the remote network to be forwarded to LAN 1:
digi.router> ip-filter 1 src gre1
digi.router> ip-filter 1 dst lan1
digi.router> ip-filter 1 protocol any
digi.router> ip-filter 1 state on
6. Save the configuration:
digi.router> save config
Example configuration steps for the second TransPort device:
1. Configure the LAN 10 interface:
digi.router> lan 10 ip-address 172.168.0.2
digi.router> lan 10 mask 255.255.255.255
digi.router> lan 10 state on
2. Configure the IPsec tunnel:
Note This example uses the default authentication and encryption options.