home

Supported platforms

Vyatta documentation

Learn how to install, configure, and operate the Vyatta Network Operating System (Vyatta NOS) and Orchestrator, which help drive our virtual networking and physical platforms portfolio.

Securing the mGRE tunnel on HUB

To secure the mGRE tunnel with IPsec, perform the following steps on HUB in configuration mode.

Table 1. Securing the mGRE tunnel with IPsec

Step

Command

Create the profile node.

vyatta@HUB# set security vpn ipsec profile DMVPN

Set the authentication mode.

vyatta@HUB# set security vpn ipsec profile DMVPN authentication mode pre-shared-secret

Define the preshared secret key. It must match that set on remote systems.

vyatta@HUB# set security vpn ipsec profile DMVPN authentication pre-shared-secret NET123

Bind the IPsec configuration to the tunnel.

vyatta@HUB# set security vpn ipsec profile DMVPN bind tunnel tun0

Specify the ESP configuration to use.

vyatta@HUB# set security vpn ipsec profile DMVPN esp-group ESP-1H

Specify the IKE configuration to use.

vyatta@HUB# set security vpn ipsec profile DMVPN ike-group IKE-1H

Commit the configuration.

vyatta@HUB# commit

View the configuration for the profile.

vyatta@HUB# show vpn ipsec profile DMVPN

 authentication {
	   mode pre-shared-secret
	   pre-shared-secret NET123
  }
 bind {
	   tunnel tun0
 }
 esp-group ESP-1H
 ike-group IKE-1H