Avaya G430 - Page 485

• ip-protocol
• tcp
• udp
• icmp
• dscp
• fragment
• Access control list –
ip access-control-list on page 498
•
global parameters on page 499
- crypto isakmp invalid-spi-recovery
- crypto ipsec nat-transparency udp-encapsulation
- crypto isakmp nat keepalive
• assigning a crypto-list to an interface on page 500
- crypto ipsec df-bit
- crypto ipsec minimal-pmtu
-
ip crypto-group
Site-to-site IPSec VPN
This section describes the concepts and procedures for VPN configuration.
To configure a site-to-site IPSec VPN, two devices (the Branch Gateway and a peer Gateway)
must be configured symmetrically.
In some cases, you may wish to configure global VPN parameters (see
Configuring global
parameters on page 499).
Note:
In the following sections, all IPSec VPN parameters that you must configure are indicated
as mandatory parameters. Non-mandatory VPN parameters have default values that are
used unless otherwise set. Thus for example, although it is mandatory to define at least one
ISAKMP policy, it is not mandatory to set the values for that ISAKMP policy since the Branch
Gateway contains default ISAKMP policy settings.
Related topics:
VPN peer coordination on page 486
Configuring ISAKMP policies on page 486
Configuring transform-sets on page 488
Configuring ISAKMP peer information on page 489
IPSec VPN
Administering Avaya G430 Branch Gateway October 2013 485