Print Download PDF Send Feedback

Previous

Next

Configuring VPN Tunnel Interfaces

You can configure the VPN Tunnel Interfaces using Gaia Portal or Gaia Clish.

Configuring VPN Tunnel Interfaces - Gaia Portal

This section shows you how to configure a VPN Tunnel interface using the Gaia Portal.

To configure a VPN Tunnel Interface:

Step

Description

1

In the Gaia Portal, select Network Management > Network Interfaces.

2

Click Add > VPN Tunnel.

To configure an existing VTI interface, select the VTI interface and click Edit.

3

In the Add/Edit window, configure these parameters:

  • VPN Tunnel ID - Unique tunnel name (integer from 1 to 99).

    Gaia automatically adds the prefix 'vpnt' to the tunnel name.

  • Remote Peer Name - Remote peer name as defined in the VPN community.

    You must define the two peers in the VPN community before you can define the VTI.

    The Peer ID is an alphanumeric character string.

  • VPN Tunnel Type - Select Numbered or Unnumbered.
  • Local Address - Defines the local peer IPv4 address (numbered VTI only).
  • Remote Address - Defines the remote peer IPv4 address (numbered VTI only).
  • Physical Device - Local peer interface name (unnumbered VTI only).
Configuring VPN Tunnel Interfaces - Gaia Clish

This section summarizes the Gaia Clish commands for VPN Tunnel Interface (VTI).

Description

Add or delete a VPN Tunnel Interface (VTI).

Syntax

Important - After you add, configure, or delete features, run the save config command to save the settings permanently.

Parameters

Parameter

Description

<Tunnel ID>

Defines the unique Tunnel ID (integer from 1 to 99).

Gaia automatically adds the prefix 'vpnt' to the Tunnel ID.

Example: vnpt10

type numbered

Defines a numbered VTI that uses a specified, static IPv4 addresses for local and remote connections.

type unnumbered

Defines an unnumbered VTI that uses the interface and the remote peer name to get addresses.

local <Local IP address>

Defines the local peer IPv4 address in dotted decimal format (numbered VTI only).

remote <Remote IP address>

Defines the remote peer IPv4 address in dotted decimal format (numbered VTI only).

peer <Peer Name

Specifies the name of the remote peer as defined in the VPN community.

You must define the two peers in the VPN community before you can define the VTI.

The Peer Name is an alphanumeric character string.

dev <Name of Local Interface>

Defines the name of the local interface (unnumbered VTI only).

Example

gaia> add vpn tunnel 20 type numbered local 10.10.10.1 remote 20.20.20.1 peer MyPeer

 

gaia> add vpn tunnel 10 type unnumbered peer MyPeer dev eth1

 

gaia> show vpn tunnels

 

gaia> delete vpn tunnel 10