User manual

25: Dynamic Multipoint Virtual Private Network (DMVPN)

_______________________________________________________________________________________________________

uci export strongswan

package strongswan

config general 'general'

option enabled 'yes'

option strictcrlpolicy 'no'

option uniqueids 'yes'

option cachecrls 'yes'

option nattraversal 'yes'

config connection

option enabled 'yes'

option name 'DMVPN'

option type 'transport'

option localproto 'gre'

option remoteproto 'gre'

option ike '3des-md5-modp1024'

option esp 'aes128-sha1'

option waniface 'wan'

option auto 'ignore'

option ikelifetime '28800s'

option keylife '300s'

option rekeymargin '30s'

option keyingtries '%forever'

option dpdaction 'hold'

option dpddelay '30s'

option dpdtimeout '150s'

config secret

option enabled 'yes'

option secrettype 'psk'

option secret 'secret'

25.6 Configuring DMVPN using CLI

You can configure DMVPN through CLI using the UCI command suite.

_______________________________________________________________________________________________________

GW1000 Series User Manual

Issue: 2.4 Page 175 of 255