Avaya G430 - Page 526

Traffic
direction
ACL parameter ACL
value
Egress Default Deny
Hub-and-spoke with VPN example
crypto isakmp policy 1
encryption aes
hash sha
group 2
authentication pre-share
exit
crypto isakmp peer address <Main Office Internet public Static IP
Address>
pre-shared-key <key1>
isakmp-policy 1
exit
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
exit
crypto map 1
set peer <Main Office Internet public Static IP Address>
set transform-set ts1
exit
ip crypto-list 901
local-address <Branch Office Public Internet Static IP Address>
ip-rule 10
source-ip <Branch data Subnet> <Branch data Subnet Mask>
destination-ip any
protect crypto map 1
exit
ip-rule 20
source-ip <Branch voice Subnet> <Branch voice Subnet Mask>
destination-ip any
protect crypto map 1
exit
exit
ip access-control-list 301
ip-rule 10
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike
composite-operation Permit
exit
ip-rule 11
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t
composite-operation permit
exit
ip-rule 12
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
ip-rule 20
source-ip any
destination-ip any
ip-protocol esp
IPSec VPN
526 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com