Virtual Private Networks (VPN)
IPsec
LR54 User Guide
471
Depending on your device configuration, you may be presented with an
Access selection
menu
. Type
admin
to access the Admin CLI.
2. At the command line, type
config
to enter configuration mode:
> config
(config)>
3. Create a new IPsec tunnel, or edit an existing one:
n
To create a new IPsec tunnel, see
.
n
To edit an existing IPsec tunnel, change to the IPsec tunnel's node in the configuration
schema. For example, for an IPsec tunnel named
ipsec_example
, change to the
ipsec_
example
node in the configuration schema:
(config)> vpn ipsec tunnel ipsec_example
(config vpn ipsec tunnel ipsec_example)>
4. Enable active recovery:
(config vpn ipsec tunnel ipsec_example)> surelink enable true
(config vpn ipsec tunnel ipsec_example)>
5. To configure the device to restart the interface when its connection is considered to have
failed:
(config vpn ipsec tunnel ipsec_example)> surelink restart true
(config vpn ipsec tunnel ipsec_example)>
This is useful for interfaces that may regain connectivity after restarting, such as a cellular
modem.
6. To configure the device to reboot when the interface is considered to have failed:
(config vpn ipsec tunnel ipsec_example)> surelink reboot enable
(config vpn ipsec tunnel ipsec_example)>
7. Set the
Interval
between connectivity tests:
(config vpn ipsec tunnel ipsec_example)> surelink interval
value
(config vpn ipsec tunnel ipsec_example)>
where
value
is any number of weeks, days, hours, minutes, or seconds, and takes the format
number
{
w|d|h|m|s
}.
For example, to set
interval
to ten minutes, enter either
10m
or
600s
:
(config vpn ipsec tunnel ipsec_example)> surelink interval 600s
(config vpn ipsec tunnel ipsec_example)>
The default is 15 minutes.
8. Determine whether the interface should fail over based on the failure of one of the test targets,
or all of the test targets:
