vpn

Configures the Virtual Private Network (VPN) settings.
Syntax
vpn

After the vpn command is entered to enable VPN configuration mode, the following configuration syntax is available:

[show[all|sites|stats|summary]|sitesite-ip|ue-ip-filter{enable|disable}]

After the show command is entered in VPN configuration mode, the following configuration syntax is available:

[all[countnum|site{all|summary}|tidtunnel-id]

After the site site-ip command is entered in VPN configuration mode, the following configuration syntax is available:

[ip-address[calea_serverip-address|crypto{enable|disable}|keys ivbyte-lengthhex-value|keys pskbit-lengthhex-value|server_ipip-address/mask|site_DC{yes|no}|site_vlanvlan-id|udpport|ue_ipip-address/mask|ue_vlanvlan-id]
Command Default

No VPN settings are configured.

Parameters
show
Displays global VPN configuration information.
all
Displays all VPN information.
sites
Displays VPN information for the specified site.
stats
Displays VPN statistical information.
summary
Displays summary VPN information.
sitesite-ip
Specifies the site IP address.
ue-ip-filter
Controls the user-enabled (UE) IP filtering.
enable
Enables the UE IP filter.
disable
Disables the UE IP filter.
countnum
Displays the VPN count information for the specified number from the data core.
tidtunnel-id
Displays VPN tunnel information for the specified tunnel ID.
sitesite-ip
Specifies the site configuration.
ip-address
Specifies the IP address of the site.
calea-serverip-address
Specifies the IP address of the calea server.
crypto
Controls the use of VPN cryptographic security.
enable
Enables VPN cryptographic security.
disable
Disables VPN cryptographic security.
keys ivbyte-lengthhex-value
Specifies the use of IV keys with the specified byte length and hex value.
keys pskbit-lengthhex-value
Specifies the use of PSK keys with the specified bit length and hex value.
server-ipip-address/mask
Specifies the IP address and mask of the server.
site_DC
Controls the use of the DC site.
yes
Enables VPN cryptographic security.
no
Disables VPN cryptographic security.
site_vlanvlan-id
Specifies the VLAN ID of the site.
udpport
Specifies the UDP protocol and port number.
ue-ipip-address/mask
Specifies the IP address and mask of the UE.
ue-vlanvlan-id
Specifies the UDP protocol and port number.
Modes

Global configuration mode

Usage Guidelines

This command is supported on the SmartZone Data Plane controllers only.

Examples

The following example configures a site and server for the VPN. 

device# configure
device(config)# vpn 
device(config-vpn)# site site-ip 10.10.1.2
device(config-vpn)# server-ip 10.20.2.3/16

The following example displays VPN summary information. 

device# configure
device(config)# vpn 
device(config-vpn)# show summary
>>> -------------------------------
VPNGRE-Free-Pool: 1023 entries, max=1024; cli_cfg_count=2
    vpngret_hash_entry_cnt=0, number_sites=0
    Gbl CALEA: site=0.0.0.0 vlan=0 vpntid=0 l2gre=0.0.0.0
    UE_subnet_filter='disabled'
    Ingress: pkts=0 (drops=0), bytes=0
    Egress:  pkts=0, bytes=0, drops=0
    Actv VPNGRE: ACC  NB=0, SB=0 (past 4-sec)
    Actv VPNGRE: CORE NB=0, SB=0 (past 4-sec)
    Rx unconfigured VPNGRE (pkts=0, bytes=0)
    Err: LL_full=0  sip_no_tunl=0
    pow0_IP: 10.6.236.131, pow0_MAC: 00:0C:29:13:5A:5D
Parent topic: Commands Si - Z