Digi AnywhereUSB Plus, User Manual, Page: 653 / 815

Virtual Private Networks (VPN) Generic Routing Encapsulation (GRE)
AnywhereUSB® Plus User Guide 653
1. Log into the AnywhereUSB Plus command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Add an IPsec tunnel named ipsec_gre2 :
(config)> add vpn ipsec tunnel ipsec_gre2
(config vpn ipsec tunnel ipsec_gre2)>
4. Set the pre-shared key to the same pre-shared key that was configured for the AnywhereUSB
Plus-1 ( testkey ):
(config vpn ipsec tunnel ipsec_gre2)> auth secret testkey
(config vpn ipsec tunnel ipsec_gre2)>
5. Set the remote endpoint to public IP address of the AnywhereUSB Plus-1 device:
(config vpn ipsec tunnel ipsec_gre2)> remote hostname 192.168.100.1
(config vpn ipsec tunnel ipsec_gre2)>
6. Add a policy:
(config vpn ipsec tunnel ipsec_gre2)> add policy end
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
7. Set the local network policy type to custom :
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local type custom
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
8. Set the local network address to the IP address and subnet of the local GRE tunnel,
172.30.0.2/32 :
(config vpn ipsec tunnel ipsec_gre2 policy 0)> local custom 172.30.0.2/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
9. Set the remote network address to the IP address and subnet of the remote GRE tunnel,
172.30.0.1/32 :
(config vpn ipsec tunnel ipsec_gre2 policy 0)> remote network
172.30.0.1/32
(config vpn ipsec tunnel ipsec_gre2 policy 0)>
10. Save the configuration and apply the change:
(config vpn ipsec tunnel ipsec_gre2 policy 0)> save
Configuration saved.
>
Task two: Create an IPsec endpoint interface