User manual

Virtual Private Networking
231
GRE tunnel name: SecondaryLink
Remote address: 210.0.1.1
Local address: 209.0.1.1
Firewall class: LAN
Branch Office SG configuration:
GRE tunnel for primary link:
GRE tunnel name: PrimaryLink
Remote address: 209.0.0.1
Local address: 210.0.0.1
Firewall class: LAN
GRE tunnel for secondary link:
GRE tunnel name: SecondaryLink
Remote address: 209.0.1.1
Local address: 210.0.1.1
Firewall class: LAN
Manually edit the ifmond.conf on both the Headquarter and Branch Office SG to
configure for IPSec failover and fallforward.
Headquarters SG ifmond.conf:
##-- Custom entries MUST be added below this point
connection primary_route
parent primary_ping
start route add -net 192.168.2.0 netmask 255.255.255.0 dev
gre1
stop route del -net 192.168.2.0 netmask 255.255.255.0 dev
gre1
maximum_retries 2147483647
retry_delay 5
test_delay 5