openvpn
- interfaces openvpn <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
OpenVPN tunnel
- Values:
ovpnN – OpenVPN tunnel name
- Instances:
Multiple
- interfaces openvpn <txt> address <ipv4cidr|ipv6cidr|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IP address
- Values:
ipv6cidr – IPv6 address and prefix length
dhcpv6 – Dynamic Host Configuration Protocol for IPv6
ipv4cidr – IPv4 address and prefix length
dhcp – Dynamic Host Configuration Protocol
- Instances:
Multiple
- interfaces openvpn <txt> alarm
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Enable or disable alarm according the link state
- interfaces openvpn <txt> alarm down <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Alarm to be enabled if the link is down
- Reference:
- interfaces openvpn <txt> connect-timeout <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Maximum time to wait for a response before trying the next server
- Values:
u32 – Seconds
- interfaces openvpn <txt> description <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Description
- Values:
id – “Interface description is too long (limit 256 characters)” (1-256)
- interfaces openvpn <txt> dhcp
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Dynamic Host Configuration Protocol configuration
- interfaces openvpn <txt> dhcp client
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
DHCP client configuration
- interfaces openvpn <txt> dhcp client fallback <ipv4cidr|ipv6cidr>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
ipv4cidr – Fallback IP address
ipv6cidr – Fallback IP address
- interfaces openvpn <txt> dhcp client rfc3442-routes
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Install RFC3442 routes received from DHCP server
- interfaces openvpn <txt> dhcp client send
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Send user-defined options to the DHCP server
- interfaces openvpn <txt> dhcp client send dhcp-client-identifier
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Include the ‘dhcp-client-identifier’ option
- Instances:
Unique
- interfaces openvpn <txt> dhcp client send dhcp-client-identifier base-mac
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Use device base mac as identifier
- interfaces openvpn <txt> dhcp client send dhcp-client-identifier serial-number
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Use device serial number as identifier
- interfaces openvpn <txt> dhcp client send dhcp-client-identifier string <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Use a string as identifier
- Values:
id – Identifier string (1-255)
- interfaces openvpn <txt> dhcp client send vendor-class-identifier
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Include the ‘vendor-class-identifier’ option
- Instances:
Unique
- interfaces openvpn <txt> dhcp client send vendor-class-identifier string <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Use a string as identifier
- Values:
id – Identifier string (1-255)
- interfaces openvpn <txt> dhcpv6
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Dynamic Host Configuration Protocol v6 configuration
- interfaces openvpn <txt> dhcpv6 client
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
DHCPv6 client configuration
- interfaces openvpn <txt> dhcpv6 client parameters-only
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Acquire only config parameters, not address
- interfaces openvpn <txt> dhcpv6 client send
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Send user-defined options to the DHCPv6 server
- interfaces openvpn <txt> dhcpv6 client send duid <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
id – DHCPv6 DUID to be sent by dhcpv6 client
- interfaces openvpn <txt> dhcpv6 client temporary
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv6 “temporary” address
- interfaces openvpn <txt> disable
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable interface
- interfaces openvpn <txt> disable advisor <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Advisor to enable or disable the interface
- Reference:
- interfaces openvpn <txt> flow
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Active netflow on interface
- interfaces openvpn <txt> flow egress
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Active output traffic
- interfaces openvpn <txt> flow egress selector <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic selector
- Reference:
- interfaces openvpn <txt> flow ingress
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Active input traffic
- interfaces openvpn <txt> flow ingress selector <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic selector
- Reference:
- interfaces openvpn <txt> ip
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv4 routing parameters
- interfaces openvpn <txt> ip igmp
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Internet Group Management Protocol (IGMP) parameters
- interfaces openvpn <txt> ip igmp join <ipv4>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Join multicast group
- Values:
ipv4 – Join multicast group on this interface
- interfaces openvpn <txt> ip igmp last-member-query-count <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IGMP last member query count
- Values:
u32 – IGMP last member query count (1-255)
- interfaces openvpn <txt> ip igmp last-member-query-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IGMP last member query interval
- Values:
u32 – IGMP last member query interval in deciseconds (1-65535)
- interfaces openvpn <txt> ip igmp query-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IGMP query interval
- Values:
u32 – IGMP query interval in seconds (1-65535)
- interfaces openvpn <txt> ip igmp query-max-response-time <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IGMP query response timeout value
- Values:
u32 – IGMP query response timeout value in deciseconds (1-65535)
- interfaces openvpn <txt> ip igmp version <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IGMP version
- Values:
u32 – IGMP version used on this interface (2-3)
- interfaces openvpn <txt> ip multicast
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Multicast parameters
- interfaces openvpn <txt> ip multicast boundary-list <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Prefix-list to control for which groups to accept or ignore received PIM join or IGMP report messages
- Reference:
- interfaces openvpn <txt> ip ospf
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Open Shortest Path First (OSPF) parameters
- interfaces openvpn <txt> ip ospf authentication
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
OSPF interface authentication
- interfaces openvpn <txt> ip ospf authentication encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – Encrypted password
- interfaces openvpn <txt> ip ospf authentication message-digest <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 authentication parameters
- Values:
id – MD5 ID number (1-255)
- Instances:
Multiple
- interfaces openvpn <txt> ip ospf authentication message-digest <id> encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – MD5 encrypted key
- interfaces openvpn <txt> ip ospf authentication message-digest <id> password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 key
- Values:
txt – MD5 Key (1-16)
- interfaces openvpn <txt> ip ospf authentication password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Plain text password
- interfaces openvpn <txt> ip ospf bandwidth <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Bandwidth of interface (kilobits/sec)
- Values:
u32 – Bandwidth in kilobits/sec (for calculating OSPF cost) (1-10000000)
- interfaces openvpn <txt> ip ospf cost <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interface cost
- Values:
u32 – OSPF interface cost (1-65535)
- interfaces openvpn <txt> ip ospf dead-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval after which neighbor is dead
- Values:
u32 – OSPF dead interval in seconds (1-65535)
- interfaces openvpn <txt> ip ospf hello-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval between hello packets
- Values:
u32 – Interval between OSPF hello packets in seconds (1-65535)
- interfaces openvpn <txt> ip ospf mtu-ignore
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable Maximum Transmission Unit (MTU) mismatch detection
- interfaces openvpn <txt> ip ospf network <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Network type
- Values:
broadcast – Broadcast network type
non-broadcast – Non-broadcast network type
point-to-multipoint – Point-to-multipoint network type
point-to-point – Point-to-point network type
- interfaces openvpn <txt> ip ospf priority <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Router priority
- Values:
u32 – Priority (0-255)
- interfaces openvpn <txt> ip ospf retransmit-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval between retransmitting lost link state advertisements
- Values:
u32 – Retransmit interval in seconds (3-65535)
- interfaces openvpn <txt> ip ospf transmit-delay <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Link state transmit delay
- Values:
u32 – Transmit delay in seconds (1-65535)
- interfaces openvpn <txt> ip pim
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Protocol Independent Multicast (PIM) parameters
- interfaces openvpn <txt> ip pim disable-bsm
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable sending and receiving bootstrap messages
- interfaces openvpn <txt> ip pim disable-unicast-bsm
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable sending and receiving unicast bootstrap messages
- interfaces openvpn <txt> ip pim drpriority <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
PIM Designated Router (DR) priority
- Values:
u32 – PIM DR priority for the interface (1-4294967295)
- interfaces openvpn <txt> ip pim hello <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
PIM hello interval
- Values:
u32 – PIM hello interval in seconds (1-255)
- interfaces openvpn <txt> ip pim passive
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable sending and receiving all PIM control messages (such as: ASSERT, BSM, HELLO, JOIN, PRUNE, REGISTER, REGISTER-STOP)
- interfaces openvpn <txt> ip reverse-path-filter <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Policy for source validation by reversed path, as specified in RFC3704
- Values:
strict – Enable Strict Reverse Path Forwarding as defined in RFC3704
loose – Enable Loose Reverse Path Forwarding as defined in RFC3704
disable – No source validation
- interfaces openvpn <txt> ip rip
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Routing Information Protocol (RIP) parameters
- interfaces openvpn <txt> ip rip authentication
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Authentication method
- interfaces openvpn <txt> ip rip authentication encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – Encrypted password
- interfaces openvpn <txt> ip rip authentication message-digest <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 authentication parameters
- Values:
u32 – MD5 ID number (1-255)
- Instances:
Multiple
- interfaces openvpn <txt> ip rip authentication message-digest <u32> encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – MD5 encrypted key
- interfaces openvpn <txt> ip rip authentication message-digest <u32> password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 key
- Values:
txt – MD5 Key (1-16)
- interfaces openvpn <txt> ip rip authentication password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Plain text password
- Values:
txt – Plain text password (1-16)
- interfaces openvpn <txt> ip rip split-horizon
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Split horizon parameters
- interfaces openvpn <txt> ip rip split-horizon disable
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable split horizon on specified interface
- interfaces openvpn <txt> ip rip split-horizon poison-reverse
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Enable poison reverse for split-horizon
- interfaces openvpn <txt> ipv6
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv6 routing parameters
- interfaces openvpn <txt> ipv6 address
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv6 address auto-configuration modes
- interfaces openvpn <txt> ipv6 address autoconf
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Enable acquisition of IPv6 address using stateless address autoconfiguration (RFC 4862)
- interfaces openvpn <txt> ipv6 address eui64 <ipv6net>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Assign IPv6 address using EUI-64 based on MAC address
- Values:
ipv6net – 64-bit IPv6 prefix to use with EUI-64 to make address
- Instances:
Multiple
- interfaces openvpn <txt> ipv6 disable-forwarding
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Configure interface-specific Host/Router behaviour
If set, the interface will switch to host mode and IPv6 forwarding will be disabled on this interface.
- interfaces openvpn <txt> ipv6 dup-addr-detect-transmits <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Number of NS messages to send while performing DAD
- Values:
u32 – Number of NS messages to send while performing DAD (0-2147483647)
- interfaces openvpn <txt> ipv6 ospfv3
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv6 Open Shortest Path First (OSPFv3) parameters
- interfaces openvpn <txt> ipv6 ospfv3 area <u32|ipv4>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
OSPFv3 Area
- Values:
u32 – OSPFv3 area in decimal notation (0-4294967295)
ipv4 – OSPFv3 area in dotted decimal notation
- interfaces openvpn <txt> ipv6 ospfv3 authentication
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
OSPFv3 interface authentication
- Instances:
Unique
- interfaces openvpn <txt> ipv6 ospfv3 authentication hmac-sha-256 <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
HMAC-SHA-256 authentication parameters
- Values:
u32 – HMAC-SHA-256 key ID (1-65535)
- Instances:
Multiple
- interfaces openvpn <txt> ipv6 ospfv3 authentication hmac-sha-256 <u32> encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – HMAC-SHA-256 encrypted password
- interfaces openvpn <txt> ipv6 ospfv3 authentication hmac-sha-256 <u32> password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
HMAC-SHA-256 plain text password
- Values:
txt – HMAC-SHA-256 plain text password (1-16)
- interfaces openvpn <txt> ipv6 ospfv3 authentication md5 <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 authentication parameters
- Values:
u32 – MD5 key ID (1-65535)
- Instances:
Multiple
- interfaces openvpn <txt> ipv6 ospfv3 authentication md5 <u32> encrypted-password <password>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
password – MD5 encrypted password
- interfaces openvpn <txt> ipv6 ospfv3 authentication md5 <u32> password <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
MD5 plain text password
- Values:
txt – MD5 plain text password (1-16)
- interfaces openvpn <txt> ipv6 ospfv3 cost <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interface cost
- Values:
u32 – OSPFv3 cost (1-65535)
- interfaces openvpn <txt> ipv6 ospfv3 dead-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval after which neighbor is declared dead
- Values:
u32 – Neighbor dead interval in seconds (1-65535)
- interfaces openvpn <txt> ipv6 ospfv3 hello-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval between hello packets
- Values:
u32 – Interval between OSPFv3 hello packets in seconds (1-65535)
- interfaces openvpn <txt> ipv6 ospfv3 ifmtu <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interface MTU
- Values:
u32 – Interface MTU value (1-65535)
- interfaces openvpn <txt> ipv6 ospfv3 instance-id <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Instance identifier
- Values:
u32 – Instance ID (0-255)
- interfaces openvpn <txt> ipv6 ospfv3 mtu-ignore
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable Maximum Transmission Unit mismatch detection
- interfaces openvpn <txt> ipv6 ospfv3 network <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Network type
- Values:
broadcast – Broadcast network type
point-to-point – Point-to-point network type
- interfaces openvpn <txt> ipv6 ospfv3 passive
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable forming of adjacency
- interfaces openvpn <txt> ipv6 ospfv3 priority <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Router priority
- Values:
u32 – Priority (0-255)
- interfaces openvpn <txt> ipv6 ospfv3 retransmit-interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval between retransmitting lost link state advertisements
- Values:
u32 – Retransmit interval in seconds (3-65535)
- interfaces openvpn <txt> ipv6 ospfv3 transmit-delay <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Link state transmit delay
- Values:
u32 – Link state transmit delay in seconds (1-65535)
- interfaces openvpn <txt> ipv6 ripng
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Routing Information Protocol (RIPng)
- interfaces openvpn <txt> ipv6 ripng split-horizon
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Split horizon parameters
- interfaces openvpn <txt> ipv6 ripng split-horizon disable
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable split horizon
- interfaces openvpn <txt> ipv6 ripng split-horizon poison-reverse
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Enable poison reverse for split-horizon
- interfaces openvpn <txt> ipv6 router-advert
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Configure parameters for sending Router Advertisements (RAs)
- interfaces openvpn <txt> ipv6 router-advert cur-hop-limit <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Value to be placed in the Current Hop Limit field in RAs
- Values:
u32 – Value to place in the Current Hop Limit field in RAs (0-255)
- interfaces openvpn <txt> ipv6 router-advert default-lifetime <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Value to be placed in Router Lifetime field in RAs
- Values:
u32 – Value in seconds to be placed in Router Lifetime field in RAs (4-9000)
u32 – This means “not a default router”, in Router Lifetime field (0)
- interfaces openvpn <txt> ipv6 router-advert default-preference <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Default router preference
- Values:
low – Default router is low preference
medium – Default router is medium preference
high – Default router is high preference
- interfaces openvpn <txt> ipv6 router-advert disable
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Disable sending RA messages
- interfaces openvpn <txt> ipv6 router-advert interval <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Interval between unsolicited multicast RAs
- Values:
u32 – Interval in seconds between unsolicited multicast RAs (1-1800)
- interfaces openvpn <txt> ipv6 router-advert link-mtu <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Value of link MTU to place in RAs
- Values:
u32 – Do not send MTU options in RAs (0)
u32 – Value of link MTU to place in RAs (1280-2147483647)
- interfaces openvpn <txt> ipv6 router-advert managed-flag <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Value for “managed address configuration” flag in RAs
- interfaces openvpn <txt> ipv6 router-advert name-server <ipv6>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
ipv6 – IPv6 address of a Recursive DNS Server
- Instances:
Multiple
- interfaces openvpn <txt> ipv6 router-advert other-config-flag <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Value to be placed in the “other configuration” flag in RAs
- interfaces openvpn <txt> ipv6 router-advert prefix <ipv6net>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IPv6 prefix to be advertised in Router Advertisements (RAs)
- Values:
ipv6net – IPv6 prefix to be advertized in Router Advertisements (RAs)
- Instances:
Multiple
- interfaces openvpn <txt> ipv6 router-advert prefix <ipv6net> autonomous-flag <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Whether prefix can be used for address auto-configuration
- interfaces openvpn <txt> ipv6 router-advert prefix <ipv6net> on-link-flag <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Flag that prefix can be used for on-link determination
- interfaces openvpn <txt> ipv6 router-advert prefix <ipv6net> preferred-lifetime <u32|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Time in seconds that the prefix will remain preferred
- Values:
u32 – Time in seconds that the prefix will remain preferred (0-2147483647)
infinity – Prefix will remain preferred forever
- interfaces openvpn <txt> ipv6 router-advert prefix <ipv6net> valid-lifetime <u32|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Time in seconds that the prefix will remain valid
- Values:
u32 – Time in seconds that the prefix will remain valid (0-2147483647)
infinity – Prefix will remain valid forever
- interfaces openvpn <txt> ipv6 router-advert reachable-time <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Value to be placed in “Reachable Time” field in RAs
- Values:
u32 – Reachable Time value in RAs (in milliseconds) (1-3600000)
u32 – Reachable Time 0 (i.e., unspecified by this router) (0)
- interfaces openvpn <txt> ipv6 router-advert retrans-timer <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Value to place in “Retrans Timer” field in RAs.
- Values:
u32 – Value in milliseconds to place in “Retrans Timer” field in RAs (0-2147483647)
- interfaces openvpn <txt> local-address <ipv4|ipv6>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local address
- Values:
ipv4 – Remote IPv4 address
ipv6 – Remote IPv6 address
- Local IP address:
- interfaces openvpn <txt> local-endpoint <ipv4|ipv4net>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local VPN endpoint address
- Values:
ipv4 – Local IPv4 address
ipv4net – Local IPv4 subnet (server mode)
- interfaces openvpn <txt> local-port <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local port
- Values:
u32 – Numeric IP port (1-65535)
- interfaces openvpn <txt> mode
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
VPN mode parameters
- Instances:
Unique
- interfaces openvpn <txt> mode client
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Client mode
- Required:
- interfaces openvpn <txt> mode client client-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Client profile
- Reference:
- interfaces openvpn <txt> mode client encryption-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Data channel encryption profile
- Reference:
- interfaces openvpn <txt> mode client tls-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
TLS profile
- Reference:
- interfaces openvpn <txt> mode client tunnel-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Tunnel profile
- Reference:
- interfaces openvpn <txt> mode p2p
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Peer-to-peer mode
- interfaces openvpn <txt> mode p2p encryption-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Data channel encryption profile
- Reference:
- interfaces openvpn <txt> mode p2p tunnel-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Tunnel profile
- Reference:
- interfaces openvpn <txt> mode server
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Server mode
- Required:
- interfaces openvpn <txt> mode server encryption-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Data channel encryption profile
- Reference:
- interfaces openvpn <txt> mode server server-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Server profile
- Reference:
- interfaces openvpn <txt> mode server tls-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
TLS profile
- Reference:
- interfaces openvpn <txt> mode server tunnel-profile <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Tunnel profile
- Reference:
- interfaces openvpn <txt> peer <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
VPN peer parameters (client/p2p mode)
- Values:
u32 – Peer index
- Instances:
Multiple
- Required:
- interfaces openvpn <txt> peer <u32> address <fqdn|ipv4|ipv6>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Remote address to use for SSL communication. Required to initiate a connection
- Values:
fqdn – Remote domain name
ipv4 – Remote IPv4 address
ipv6 – Remote IPv6 address
- interfaces openvpn <txt> peer <u32> connect-timeout <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Maximum time to wait for a response before trying the next server override for peer
- Values:
u32 – Seconds
- interfaces openvpn <txt> peer <u32> local-port <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local port override for peer
- Values:
u32 – Numeric IP port (1-65535)
- interfaces openvpn <txt> peer <u32> protocol <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Protocol override for peer
- Values:
udp – UDP protocol
tcp-client – TCP protocol (initiator)
tcp-server – TCP protocol (listener)
- interfaces openvpn <txt> peer <u32> remote-port <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Remote port override for peer
- Values:
u32 – Numeric IP port (1-65535)
- interfaces openvpn <txt> protocol <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Default protocol
- Values:
udp – UDP protocol
tcp-client – TCP protocol (initiator)
tcp-server – TCP protocol (listener)
- interfaces openvpn <txt> remote-endpoint <ipv4>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Remote VPN endpoint address
- Values:
ipv4 – Remote IPv4 address
- interfaces openvpn <txt> remote-port <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Default remote port
- Values:
u32 – Numeric IP port (1-65535)
- interfaces openvpn <txt> tcp-mss <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
u32 – Change tcp-mss value
- interfaces openvpn <txt> traffic
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic processing options
- interfaces openvpn <txt> traffic control
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic control for interface
- interfaces openvpn <txt> traffic control in <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Ingress traffic control for interface
- Reference:
- interfaces openvpn <txt> traffic control out <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Egress traffic control for interface
- Reference:
- interfaces openvpn <txt> traffic nat
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Network Address Translation (NAT) parameters
- interfaces openvpn <txt> traffic nat destination
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Destination NAT settings
- interfaces openvpn <txt> traffic nat destination rule <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Rule number for NAT
- Values:
u32 – Number for this NAT rule (1-9999)
- Instances:
Multiple
- interfaces openvpn <txt> traffic nat destination rule <u32> address <ipv4|ipv4net|ipv4range|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IP address, subnet, range or redirect
- Values:
ipv4 – NAT to the specified IP address
ipv4net – NAT to the specified network address
ipv4range – NAT to the specified IP range
redirect – NAT to the interface address
- interfaces openvpn <txt> traffic nat destination rule <u32> description <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Rule description
- interfaces openvpn <txt> traffic nat destination rule <u32> log
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Log packets to which this rule has been applied
- interfaces openvpn <txt> traffic nat destination rule <u32> log level <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Loggin level
- Values:
emerg – Emergency messages
alert – Urgent messages
crit – Critical messages
err – Error messages
warn – Warning messages
notice – Messages for further investigation
info – Informational messages
debug – Debug messages
- interfaces openvpn <txt> traffic nat destination rule <u32> log prefix <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Log message prefix text, up to 29 characters
- interfaces openvpn <txt> traffic nat destination rule <u32> network <ipv4net>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IP prefix to use in translation (host part is kept)
- Values:
ipv4net – NAT to the specified network address, host part of the address will remain unchanged
- interfaces openvpn <txt> traffic nat destination rule <u32> port <u32|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
NAT port
- Values:
u32 – Port to use in PAT (1-65535)
range – Port range (pool, for example, 1001-1005)
- interfaces openvpn <txt> traffic nat destination rule <u32> protocol <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – NAT transport protocol
- interfaces openvpn <txt> traffic nat destination rule <u32> selector <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic selector
- Reference:
- interfaces openvpn <txt> traffic nat source
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Source NAT settings
- interfaces openvpn <txt> traffic nat source rule <u32>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Rule number for NAT
- Values:
u32 – Number for this NAT rule (1-9999)
- Instances:
Multiple
- interfaces openvpn <txt> traffic nat source rule <u32> address <ipv4|ipv4net|ipv4range|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IP address, subnet, range or masquerade
- Values:
ipv4 – NAT to the specified IP address
ipv4net – NAT to the specified network address
ipv4range – NAT to the specified IP range
masquerade – NAT to the interface address
- interfaces openvpn <txt> traffic nat source rule <u32> description <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Rule description
- interfaces openvpn <txt> traffic nat source rule <u32> log
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Log packets to which this rule has been applied
- interfaces openvpn <txt> traffic nat source rule <u32> log level <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Loggin level
- Values:
emerg – Emergency messages
alert – Urgent messages
crit – Critical messages
err – Error messages
warn – Warning messages
notice – Messages for further investigation
info – Informational messages
debug – Debug messages
- interfaces openvpn <txt> traffic nat source rule <u32> log prefix <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – Log message prefix text, up to 29 characters
- interfaces openvpn <txt> traffic nat source rule <u32> network <ipv4net>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
IP prefix to use in translation (host part is kept)
- Values:
ipv4net – NAT to the specified network address, host part of the address will remain unchanged
- interfaces openvpn <txt> traffic nat source rule <u32> port <u32|id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
NAT port
- Values:
u32 – Port to use in PAT (1-65535)
range – Port range (pool, for example, 1001-1005)
- interfaces openvpn <txt> traffic nat source rule <u32> protocol <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
- Values:
txt – NAT transport protocol
- interfaces openvpn <txt> traffic nat source rule <u32> selector <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic selector
- Reference:
- interfaces openvpn <txt> traffic policy
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic policy rulesets for interface
- interfaces openvpn <txt> traffic policy in <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Input traffic policy ruleset for interface
- Reference:
- Instances:
Multiple
- interfaces openvpn <txt> traffic policy in <txt> priority <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Priority order for traffic policy
- Values:
very-high – First policy executed before NAT
high – Second policy executed before NAT
low – First policy executed after NAT
very-low – Second policy executed after NAT
- interfaces openvpn <txt> traffic policy local-in <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local input traffic policy ruleset for interface
- Reference:
- Instances:
Multiple
- interfaces openvpn <txt> traffic policy local-in <txt> priority <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Priority order for traffic policy
- Values:
very-high – First policy executed
high – Second policy executed
low – Third policy executed
very-low – Fourth policy executed
- interfaces openvpn <txt> traffic policy local-out <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Local output traffic policy ruleset for interface
- Reference:
- Instances:
Multiple
- interfaces openvpn <txt> traffic policy local-out <txt> priority <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Priority order for traffic policy
- Values:
very-high – First policy executed
high – Second policy executed
low – Third policy executed
very-low – Fourth policy executed
- interfaces openvpn <txt> traffic policy out <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Output traffic policy ruleset for interface
- Reference:
- Instances:
Multiple
- interfaces openvpn <txt> traffic policy out <txt> priority <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Priority order for traffic policy
- Values:
very-high – First policy executed before NAT
high – Second policy executed before NAT
low – First policy executed after NAT
very-low – Second policy executed after NAT
- interfaces openvpn <txt> traffic zone <txt>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Traffic zone associated with this interface
- Reference:
- interfaces openvpn <txt> vrf <id>
- AresC640
Atlas840
M10-Smart
M2
RS420
RXL15000
SDE
Virtual Routing and Forwarding domain name
- Reference: