Ipsec Over Pppoe Between Two Secure Routers; Pppoe Client Configuration - Avaya 1000 Series Configuration Manual

IPSec over PPPoE between two Secure Routers

The remote office uses PPPoE client for connecting Internet and by acquiring dynamic ip
address from ISP. The IP address is assigned dynamically to the PPPoE interface. Remote
Office to access corporate network of the headquarters uses site to site IPSec using following
security suites.
Note:
This configuration is not currently supported with the ABOT feature in the VPN Router.
• Local address 0.0.0.0 (as PPPoE Clients obtains dynamic IP address)
• DES, SHA1, DH group 1 and Preshared key authentication method as Phase 1 security
suite
• Aggressive mode
• 3DES, SHA1, tunnel mode and ESP as phase 2 security suite.

PPPoE Client Configuration

config term
# internet interface configuration
interface ethernet 0
ip address 20.1.1.2 255.255.255.0
crypto untrusted
exit
# trusted/corporate n/w interface configuration
interface ethernet 1
ip address 10.1.1.1 255.255.255.0
crypto trusted
exit
# PPPoE Client configuration
interface virtual-access test
Avaya Secure Router 1000 Series Configuration Guide
IPSec over PPPoE between two Secure Routers
December 2010 289