Avaya G430 - Page 496

Examples:
Gxxx-001(Crypto 901)# local-address 192.168.49.1
Done!
Gxxx-001(Crypto 901)# local-address FastEthernet 10/3
Done!
Note:
Specifying the interface as a name is one of the prerequisites for working with
dynamic local peer IP addresses. For more information about working with
dynamic local peer IP addresses, see Dynamic local peer IP on page 509.
3. Specify the name of the crypto list using the name command.
For example:
Gxxx-001(Crypto 901)# name “Public Network via ADSL”
Done!
4. Use the ip-rule command, followed by an index number from 1 to 1000, to enter
the context of an ip-rule and to create the ip-rule if it does not exist.
Important:
It is mandatory to create at least one ip-rule.
For example:
Gxxx-001(Crypto 901)# ip-rule 10
Gxxx-001(Crypto 901/ip rule 10)#
5. Configure ip-rule parameters as follows:
• Use the description command to assign a description to the ip-rule.
• To specify a range of source and destination IP addresses to which the rule
applies, use the source-ip and destination-ip commands, followed by
the IP range criteria. The IP range criteria can be one of the following:
- single address: . Type host, followed by an IP address, to set a single
IP address to which the rule applies.
- wildcard: . Type host, followed by an IP address using wildcards, to set
a range of IP addresses to which the rule applies.
- All addresses: . Type any to apply the rule to all IP addresses.
• Use the no form of the appropriate command to return to the default value,
any.
• Define the action by specifying whether to protect traffic that matches the
source and destination addresses, using one of the following commands:
- no protect. Do not protect traffic that matches the source and
destination addresses.
- protect crypto map crypto-map-id. Protect traffic that matches
the source and destination addresses. The specified crypto map specifies
IPSec VPN
496 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com