Digi TransPort WR11 - Page 482

Configuring Virtual Private Networking (VPN) Configure Internet Protocol security (IPsec)
Digi TransPort® Routers User Guide
482
remote TCP/UDP port n
Allow IP packets with matching destination TCP/UDP ports to be tunneled.
local TCP/UDP port in the range of n1 to n2
Allow IP packets with source TCP/UDP ports in the specified range to be tunneled. This is only
available when IKEv2 is in use.
remote TCP/UDP port in the range of n1 to n2
Allow IP packets with destination TCP/UDP ports in the specified range to be tunneled. This is
only available when IKEv2 is in use.
5. Click Apply.
Command line
Set basic IPsec tunnel parameters
Command Instance Parameter Values Equivalent web parameter
eroute n descr String Description
eroute n peerip IP address or hostname The IP address or hostname of
the remote unit.
eroute n bakpeerip IP address or hostname Use n as a backup unit.
eroute n locip IP address IP Address (for Local LAN)
eroute n locmsk IP Mask IP Mask (for Local LAN)
eroute n locipifent blank, ETH, PPP Use interface x,y
x=Interface type
eroute n locipifadd Integer Use interface x,y
y=interface number
eroute n remip IP address IP Address (for Remote LAN).
eroute n remmsk IP Mask IP Mask (for Remote LAN).
eroute n remnetid String Remote Subnet ID.
eroute n authmeth Off, Preshared,
xauthinitpre, rsa,
xauthinitrsa
Use the following security on this
tunnel.
eroute n ourid String Our ID.
eroute n ouridtype 0=IKE ID
1=FQDN
2=User FQDN
3=IPv4 Address
Our ID type.
eroute n peerid String Remote ID.