Step 10: Configure Firewall Policies To Allow Ike Negotiation Through Untrusted Interface; Step 11: Display Firewall Policies In The Internet Map; Step 12: Display Firewall Policies In The Internet Map In Detail; Step 13: Configure Firewall Policies For A Group Of Mobile Users To Allow Access To The Local Lan - Avaya 1000 Series Configuration Manual

Example 5: Configuring IPSec Remote Access to Corporate LAN with Mode-Configuration Method
Step 10: Configure firewall policies to allow IKE negotiation through
untrusted interface
Networks1/configure> firewall internet
Networks1/configure/firewall internet> policy 1000 in service ike self
Networks1/configure/firewall internet/policy 1000 in> exit

Step 11: Display firewall policies in the Internet map

Networks1> show firewall policy internet

Step 12: Display firewall policies in the Internet map in detail

Networks1> show firewall policy internet detail
Step 13: Configure firewall policies for a group of mobile users to
allow access to the local LAN
Networks1/configure> firewall corp
Networks1/configure/firewall corp> policy 1000 in address 20.1.1.100
20.1.1.150 10.0.1.0 24
Networks1/configure/firewall corp/policy 1000 in> exit
Note:
The address range in this command typically matches the address range configured in the
dynamic IKE policy (see Step 4).
Avaya Secure Router 1000 Series Configuration Guide December 2010 163