Use the system auto-tunnel allow command to gain some security by specifying the subnets of appliance IP addresses with which you will allow auto-tunnels to be built. There is strict checking in place to prevent VXOA instances from attempting to create tunnels to anything but another VXOA instance. The allow command increases this security by having the user specify the only valid subnets used by remote Silver Peak VXOA instances.Use the no form of this command to remove the auto-tunnel allowable subnet.system auto-tunnel allow <network prefix>/<mask> [<network prefix>/<mask>] [<network prefix>/<mask>]no system auto-tunnel allow <network prefix>/<mask>
Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com. |