Avaya G430 - Page 507

Traffic direction ACL parameter ACL value Description
Egress All allowed services
from any IP address to
any local subnet
Permit This traffic is tunnelled using
VPN
Egress Default Deny -
Simple VPN topology example
crypto isakmp policy 1
encryption aes
hash sha
group 2
exit
crypto isakmp peer address <Main Office Public Internet Static IP Address>
pre-shared-key <secret key>
isakmp-policy 1
exit
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
set pfs 2
exit
crypto map 1
set peer <Main OfficeMain Office Public Internet Static IP
Address>
set transform-set ts1
exit
ip crypto-list 901
local-address <Branch Office Public Internet Static IP Address>
ip-rule 10
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip any
protect crypto map 1
exit
ip-rule 20
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip any
protect crypto map 1
exit
exit
ip access-control-list 301
ip-rule 10
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike
composite-operation Permit
exit
ip-rule 11
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t
composite-operation permit
exit
ip-rule 12
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
ip-rule 20
IPSec VPN
Administering Avaya G430 Branch Gateway October 2013 507