Alcatel-Lucent IAP93 Betriebsanweisung PDF herunterladen (Seite 240)

240 | VPN Configuration AOS-W Instant 6.3.1.1-4.0 | User Guide

3. Enter the IP address or fully qualified domain name (FQDN) for the main VPN/IPSec endpoint in the Primary

host field.

4. Enter the IP address or FQDN for the backup VPN/IPSec endpoint in the Backup host field. This entry is

optional. When you specify the primary and backup host details, the other fields are displayed

5. Specify the following parameters. A sample configuration is shown in Figure 79.

a. To allow the VPN tunnel to switch back to the primary host when it becomes available again, select Enabled

from the Preemption drop-down list . This step is optional.

b. If Preemption is enabled, specify a value in seconds for Hold time. When preemption is enabled and the

primary host comes up, the VPNtunnel switches to the primary host after the specified hold-time. The default

value for Hold time is 600 seconds.

c. To allow the OAW-IAP to create a backup VPN tunnel to the Switch along with the primary tunnel, and

maintain both the primary and backup tunnels separately, select Enabled from the Fast failover drop-down

list. When fast failover is enabled and if the primary tunnel fails, the OAW-IAP can switch the data stream to

the backup tunnel. This reduces the total failover time to less than one minute.

d. Specify a value in seconds for Secs between test packets. Based on the configured frequency, the OAW-

IAP can verify if an active VPN connection is available. The default value is 5 seconds, which means that the

OAW-IAP will send one packet to the controller at every 5 seconds.

e. Enter a value for Max allowed test packet loss, to define a number for lost packets, after which the OAW-

IAP can determine that the VPNconnection is unavailable. The default value is 2.

f. To disconnect all wired and wireless users when the system switches during VPNtunnel transition from

primary to backup and backup to primary, set Reconnect user on failover to Enabled.

g. To configure an interval for which wired and wireless users are disconnected during a VPN tunnel switch,

specify a value in seconds for Reconnect time on failover within a range of 30—900 seconds. By default, the

reconnection duration is set to 60 seconds.

Figure 79 Alcatel-Lucent IPSec Configuration

6. Click Next to continue. When the IPsec tunnel configuration is completed, the packets that are sent from and

received by an OAW-IAP are encrypted.

In the CLI

To configure an Alcatel-Lucent IPSec VPN tunnel:

(Instant Access Point)(config)# vpn primary <name>

(Instant Access Point)(config)# vpn backup <name>

(Instant Access Point)(config)# vpn fast-failover

(Instant Access Point)(config)# vpn hold-time <seconds>

(Instant Access Point)(config)# vpn preemption

(Instant Access Point)(config)# vpn monitor-pkt-send-freq <frequency>

(Instant Access Point)(config)# vpn monitor-pkt-lost-cnt <count>

1 2 ... 235 236 237 238 239 240 241 242 243 244 245 ... 334 335

Keine Kommentare

Alcatel-Lucent IAP93 Betriebsanweisung Seite 240