VPN Configuration
19.2 Configuring a Tunnel from an AP to a Mobility Controller
SCALANCE W1750D UI
306
Configuration Manual, 02/2018, C79000-G8976-C451-02
–
To disconnect all wired and wireless users when the system switches during VPN
tunnel transition from primary to backup and backup to primary, set Reconnect User
On Failover to Enabled.
–
To configure an interval during which the wired and wireless users are disconnected
during a VPN tunnel switch, specify a value in seconds for Reconnect Time On
Failover within a range of 30–900 seconds. By default, the reconnection duration is set
to 60 seconds.
–
Specify a value in seconds for Secs between test packets. Based on the configured
frequency, the AP can verify if an active VPN connection is available. The default
value is 5 seconds, which means that the AP sends one packet to the controller every
5 seconds.
–
Enter a value for Max allowed test packet loss to define a number for lost packets,
exceeding which the AP can determine that the VPN connection is unavailable. The
default value is 2.
Figure 19-1 IPsec Configuration
6.
Click Next to create routing profiles. When the IPsec tunnel configuration is completed,
the packets that are sent from and received by an AP are encrypted.
In the CLI
To configure an IPsec VPN tunnel:
(scalance)(config)# vpn primary <name>
(scalance)(config)# vpn backup <name>
(scalance)(config)# vpn fast-failover
(scalance)(config)# vpn hold-time <seconds>
(scalance)(config)# vpn preemption
