Chapter 16 Interfaces
ZyWALL Series CLI Reference Guide
164
16.12.2 VTI Interface Command Example
The following commands set up a VTI interface with the shown parameters and binds it to an IPSec SA
using a VPN Tunnel Interface scenario.
vpn-interface-restriction
deactivate
Turns off interface restrictions for IPSec VPN traffic.
When the WAN interface on which incoming VPN traffic was received has
failed or the VPN client is connected to the LAN, the Zyxel Device can
forward outgoing VPN traffic via a different interface.
Note: The command takes effect after you restart the Zyxel Device.
show interface vti
Displays interface details for all VTI interfaces.
show interface vtix
Displays interface details for VTI x.
show vpn-interface-
restriction status
Displays whether interface restrictions for IPSec VPN traffic is enabled or not.
Table 78 interface Commands: VTI Interfaces (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# interface vti0
Router(config-if-vti)# downstream 10000
Router(config-if-vti)# upstream 10000
Router(config-if-vti)# ip address 1.1.1.1 255.255.255.0
Router(config-if-vti)# metric 5
Router(config-if-vti)# traffic-prioritize content-filter deactivate
Router(config-if-vti)# exit
Router(config)# show interface vti0
interface name: vti0
active: no
vpn rule:
connection: no
IP address: 1.1.1.1
netmask: 255.255.255.0
upstream: 10000
downstream: 10000
metric: 5
Router(config)#
Router(config)# crypto map test
Router(config-crypto test)# scenario vpn-tunnel-interface
Router(config-crypto test)# exit
Router(config)# binding interface vti0 crypto-map test
Router(config)#
To Next Page
Loading...
