Digi IX20, Руководство пользователя

Страница: 293 / 726

Virtual Private Networks (VPN) IPsec
IX20 User Guide 293
4. Enable active recovery:
(config vpn ipsec tunnel ipsec_example)> connection_monitor enable true
(config vpn ipsec tunnel ipsec_example)>
5. To configure the device to restart the interface when its connection is considered to have
failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor restart true
(config vpn ipsec tunnel ipsec_example)>
This is useful for interfaces that may regain connectivity after restarting, such as a cellular
modem.
6. To configure the device to reboot when the interface is considered to have failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor reboot enable
(config vpn ipsec tunnel ipsec_example)>
7. Set the Interval between connectivity tests:
(config vpn ipsec tunnel ipsec_example)> connection_monitor interval value
(config vpn ipsec tunnel ipsec_example)>
where value is any number of weeks, days, hours, minutes, or seconds, and takes the format
number { w|d|h|m|s }.
For example, to set interval to ten minutes, enter either 10m or 600s :
(config vpn ipsec tunnel ipsec_example)> connection_monitor interval 600s
(config vpn ipsec tunnel ipsec_example)>
The default is 15 minutes.
8. Determine whether the interface should fail over based on the failure of one of the test
targets, or all of the test targets:
(config vpn ipsec tunnel ipsec_example)> connection_monitor success_
condition
value
(config vpn ipsec tunnel ipsec_example)>
Where value is either one or all .
9. Set the number of probe attempts before the WAN is considered to have failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor attempts num
(config vpn ipsec tunnel ipsec_example)>
The default is 3 .
10. Set the amount of time that the device should wait for a response to a probe attempt before
considering it to have failed:
(config vpn ipsec tunnel ipsec_example)> connection_monitor timeout value
(config vpn ipsec tunnel ipsec_example)>