Digi TransPort WR11, User Manual

Page: 414 / 866

Configure Virtual Private Networking (VPN) IPsec parameters
Digi TransPort WR Routers User Guide 414
Tunnel Negotiation parameters
Enable IKE tracing
Enables the router to write IKE negotiation information in the analyser trace.
Negotiate a different IP address and Mask
Configures the IPsec tunnel to negotiate a different local LAN IP address and mask. You can then
use the firewall to translate the source addresses of the packets to a value that lies within the
negotiated range. This allows a packet to match more than one IPsec tunnel, but use a different
source address (from the peer’s perspective) depending on which IPsec tunnel is in use.
IP Address
The alternative IP address to negotiate.
Mask
The alternative IP mask to negotiate.
Negotiate a virtual IP address using MODECFG
Used when the remote peer is a Cisco device using MODECFG to assign a specific IP address to
this router during SA setup negotiations. This is commonly seen in Remote Access (RA) type
VPNs and EasyVPN solutions.
XAuth ID
Extended Authentication ID for use with Cisco XAUTH.
Related CLI commands
Entity Instance Parameter Values Equivalent web parameter
eroute n debug on, off Enable IKE tracing
eroute n neglocip IP Address Negotiate a different IP address and
Mask
eroute n neglocmsk IP Mask Negotiate a different IP address and
Mask
eroute n vip on, off Negotiate a virtual IP address using
MODECFG
eroute n xauthid String XAuth ID