Compatible Systems 2+ manual Configure tunnel partner vpn

Chapter 6 - Basic Configuration Guide 49

If Manual is specified, this Tunnel Partner will not use IKE, and the tunnel’s encryption and authentication parameters must be manually set in the Manual Key Management dialog box, which is not described here.

ϖNote: For more information regarding non-IKE encryption and authentication, refer to the Text-Based Configuration and Command Line Management Reference Guide.

If Initiate is specified, this Tunnel Partner will use IKE, but will only initiate tunnel establishment attempts and will not respond to them.

If Respond is specified, this Tunnel Partner will use IKE, but will only respond to tunnel establishment attempts and will not initiate them.

Transform-Sets the authentication and encryption algorithms to be used for tunnel sessions. ESP(MD5,DES) is the default setting and is recommended for most settings.

SharedKey-Sets a shared alphanumeric secret which is used to generate session keys for authenticating and/or encrypting each packet sent or received through the tunnel.

Dual Ethernet Setup Example

configure tunnel partner vpn 0

*[ Tunnel Partner VPN 0 ]# partner=10.10.5.3 *[ Tunnel Partner VPN 0 ]# bindto=ether 1 *[ Tunnel Partner VPN 0 ]# keymanage=auto

*[ Tunnel Partner VPN 0 ]# transform=esp(md5,des) *[ Tunnel Partner VPN 0 ]# sharedkey=babaganoush

Single Ethernet Setup Example

configure tunnel partner vpn 0

*[ Tunnel Partner VPN 0 ]# partner=10.10.5.3 *[ Tunnel Partner VPN 0 ]# bindto=ether 0 *[ Tunnel Partner VPN 0 ]# keymanage=auto

*[ Tunnel Partner VPN 0 ]# transform=esp(md5,des) *[ Tunnel Partner VPN 0 ]# sharedkey=babaganoush

3. Save the Configuration and download it to the device.

Use the save command to save the configuration and download it to the device. When asked if you are sure that you want to download the configuration and restart the device, reply yes. After the IntraPort has rebooted, LAN-to-LAN tunnels can be established.

ϖNote: Do not turn the IntraPort 2/2+ off during the boot process or it will lose its operating software.