Secure Computing SG560 - Page 251

GRE tunnel for primary link:
GRE tunnel name: PrimaryLink
Remote address: 209.0.0.1
Local address: 210.0.0.1
Firewall class: LAN
GRE tunnel for secondary link:
GRE tunnel name: SecondaryLink
Remote address: 209.0.1.1
Local address: 210.0.1.1
Firewall class: LAN
Manually edit the ifmond.conf on both the Headquarter and Branch Office SG to
configure for IPSec failover and fall forward.
Headquarters SG ifmond.conf:
##-- Custom entries MUST be added below this point
connection primary_route
parent primary_ping
start route add -net 192.168.2.0 netmask 255.255.255.0 dev
gre1
stop route del -net 192.168.2.0 netmask 255.255.255.0 dev
gre1
maximum_retries 2147483647
retry_delay 5
test_delay 5
connection secondary_route
parent secondary_ping
start route add -net 192.168.2.0 netmask 255.255.255.0 dev
gre2
stop route del -net 192.168.2.0 netmask 255.255.255.0 dev
gre2
maximum_retries 2147483647
245
Virtual Private Networking