Digi IX10, Руководство пользователя

Страница: 279 / 874

Virtual Private Networks (VPN) IPsec
IX10 User Guide 279
(config vpn ipsec tunnel ipsec_example policy 0)> local type value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is one of:
n address : The address of a local network interface.
Set the address:
i. Use the ? to determine available interfaces:
ii. Set the interface. For example:
(config vpn ipsec tunnel ipsec_example policy 0)> local
address eth1
(config vpn ipsec tunnel ipsec_example policy 0)>
n
network : The subnet of a local network interface.
Set the network:
i. Use the ? to determine available interfaces:
ii. Set the interface. For example:
(config vpn ipsec tunnel ipsec_example policy 0)> local
network eth1
(config vpn ipsec tunnel ipsec_example policy 0)>
n
custom : A user-defined network.
Set the custom network:
(config vpn ipsec tunnel ipsec_example policy 0)> local custom
value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is the IPv4 address and optional netmask. The keyword any can also
be used.
n
request : Requests a network from the remote peer.
n
dynamic : Uses the address of the local endpoint.
d. Set the port matching criteria for the local traffic selector:
(config vpn ipsec tunnel ipsec_example policy 0)> local port value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is the port number, a range of port numbers, or the keyword any .
e. Set the protocol matching criteria for the local traffic selector:
(config vpn ipsec tunnel ipsec_example policy 0)> local protocol value
(config vpn ipsec tunnel ipsec_example policy 0)>
where value is one of:
n
any : Matches any protocol.
n
tcp : Matches TCP protocol only.
n
udp : Matches UDP protocol only.