Avaya G430 - Page 523

exit
ip-rule 40
desintation-ip any
source-ip host <Branch Subnet1> <Branch Subnet1 Mask>
composite-operation Permit
exit
ip-rule 50
destination-ip any
source-ip host <Branch Subnet2> <Branch Subnet2 Mask>
composite-operation Permit
exit
ip-rule default
composite-operation deny
exit
exit
interface vlan 1.1
ip-address <Branch Subnet1> <Branch Subnet1 Mask>
pmi
icc-vlan
exit
interface vlan 1.2
ip-address <Branch Subnet2> <Branch Subnet2 Mask>
exit
interface fastethernet 10/3
encapsulation PPPoE
traffic-shape rate 256000
ip Address <Branch Office Public Internet Static IP Address>
<Branch Office Public Internet
network mask>
ip crypto-group 901
ip access-group 301 in
ip access-group 302 out
exit
ip default-gateway FastEthernet 10/3 high
Note:
The highlighted commands are the CLI commands that add the mesh capabilities to the
simple hub and spokes configuration.
Full solution: hub and spoke with VPN
The full solution consists of a hub-and-spoke with VPN for data and VoIP control backup.
In this topology:
• There is a direct WAN connection, through an external layer 3 router in the branch, to the
Main Office for VoIP bearer and as primary VoIP control connection. The layer 3 router
is connected to the G430 through a dedicated VLAN interface.
• The Broadband Internet connection uses cable or DSL modem, with a static public IP
address
• There is a VPN tunnel to the hub over the Internet for intranet data, and as backup
connection for VoIP control
• The local hosts access the Internet directly through the local broadband connection
• The PSTN connection backs up the voice bearer
IPSec VPN
Administering Avaya G430 Branch Gateway October 2013 523