Avaya G430 - Page 524

Full solution: hub-and-spoke with VPN for data and VoIP control backup
Related topics:
Configuring hub-and-spoke with VPN for data and VoIP control backup on page 524
Hub-and-spoke with VPN on page 525
Hub-and-spoke with VPN example on page 526
Configuring hub-and-spoke with VPN for data and VoIP control backup
Procedure
1. Configure the Branch Office as follows:
• The default gateway is the Internet interface.
• VPN policy is configured on the Internet interface egress as follows: Traffic
from the local GRE tunnel endpoint to the remote GRE tunnel endpoint >
encrypt, using IPSec tunnel mode, with the remote peer being the Main
Office.
• An access control list (ACL) is configured on the Internet interface to allow only
the VPN tunnel and ICMP traffic. See
Configuring hub-and-spoke with VPN
for data and VoIP control backup on page 524 for configuration settings.
Note:
For information about using access control lists, see Policy lists on
page 557.
• Policy Based Routing (PBR) is configured as follows on VoIP VLAN and
loopback interfaces:
- Destination IP = local subnets > Route: DBR
IPSec VPN
524 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com