Vyatta Network OS Documentation

Learn how to install, configure and operate the Vyatta NOS, which helps drive our virtual networking & physical platforms portfolio.

security vpn ipsec site-to-site peer <peer> tunnel <tunnel> esp-group <name>

Specifies an ESP configuration to use for this tunnel.

set security vpn ipsec site-to-site peer peer tunnel tunnel esp-group name
delete security vpn ipsec site-to-site peer peer tunnel tunnel esp-group
show security vpn ipsec site-to-site peer peer tunnel tunnel esp-group

The ESP group specified by security vpn ipsec site-to-site peer <peer> default-esp-group <name> will be used.

peer
Mandatory. The address of the far-end VPN gateway. The format is an IPv4 address, an IPv6 address, a hostname (IPv4 networks only), an authentication ID, or 0.0.0.0.
tunnel
Mandatory. Multi-node. An integer that uniquely identifies this tunnel configuration for this peer VPN gateway. Each tunnel corresponds to a distinct connection configuration. The numbers range from 0 through 4294967295.

A given VPN peer may have more than one tunnel configuration, but each peer must have at least one. To define more than one tunnel configuration for a peer, create multiple tunnel configuration nodes within the peer configuration.

name
Specifies the named ESP configuration (ESP group) to be used for this connection. The ESP group must have already been defined, using security vpn ipsec esp-group <name>.

Configuration mode


security {
        vpn {
            ipsec {
                site-to-site {
                    peer peer {
                        tunnel tunnel {
                            esp-group name
                    }
                }
            }
        }
    }
}

Use this command to specify an ESP configuration to use for this connection. It will override the ESP group specified by security vpn ipsec site-to-site peer <peer> default-esp-group <name> which will be used by default.

Use the set form of this command to specify an ESP configuration to use for this connection.

Use the delete form of this command to remove the configuration.

Use the show form of this command to view the configuration.