Avaya 1000 Series Configuration Manual page 6

Installing Licenses.........................................................................................................................................136
Example 1: Securely Managing the Secure Router 1000 Series Over an IPSec Tunnel..............................137
Step 1: Configure a WAN bundle of network type untrusted................................................................138
Step 2: Configure the Ethernet interface with trusted network type.....................................................138
Step 3: Display the crypto interfaces....................................................................................................138
Step 4: Add the route to the peer LAN.................................................................................................139
Step 5: Configure IKE to the peer gateway..........................................................................................139
Step 6: Display the IKE policies............................................................................................................139
Step 7: Display the IKE policies in detail..............................................................................................139
Step 8: Configure the IPSec tunnel to the remote host........................................................................140
Step 9: Display the IPSec policies........................................................................................................140
Step 10: Display IPSec policies in detail..............................................................................................140
Step 11: Configure firewall policies to allow IKE negotiation through untrusted interface....................141
Step 12: Configure firewall policies to allow desired services through untrusted interface to manage the
router....................................................................................................................................................141
Step 13: Display firewall policies in the Internet map...........................................................................141
Step 14: Display firewall policies in the Internet map in detail..............................................................141
Step 15: Enable SNMP on the Networks1 router.................................................................................142
Step 16: Display SNMP communities...................................................................................................142
Step 17: Repeat steps 1 - 16 with suitable modifications on Networks2 prior to managing Networks1 from
the Networks2 LAN side.......................................................................................................................142
Step 18: Test the IPSec tunnel for managing the Networks1 router from a host on the Networks2 LAN.
..............................................................................................................................................................142
Step 19: When the SNMP manager starts managing Networks1 from the Networks2 LAN, display the IKE
and IPSec SA tables.............................................................................................................................142
Example 2: Joining Two Private Networks with an IP Security Tunnel.........................................................143
Step 1: Configure a WAN bundle of network type untrusted................................................................143
Step 2: Configure the Ethernet interface with trusted network type.....................................................144
Step 3: Display the crypto interfaces....................................................................................................144
Step 4: Add route to peer LAN.............................................................................................................144
Step 5: Configure IKE to the peer gateway..........................................................................................144
Step 6: Display the IKE policies............................................................................................................145
Step 7: Display the IKE policies in detail..............................................................................................145
Step 8: Configure IPSec tunnel to the remote host..............................................................................145
Step 9: Display IPSec policies..............................................................................................................145
Step 10: Display IPSec policies detail..................................................................................................146
Step 11: Configure firewall policies to allow IKE negotiation through untrusted interface....................146
Step 12: Display firewall policies in the Internet map...........................................................................146
Step 13: Display firewall policies in the Internet map in detail..............................................................146
Step 14: Configure firewall policies to allow transit traffic from remote LAN to the local LAN..............146
Step 15: Display firewall policies in the corp map................................................................................147
Step 16: Display firewall policies in the corp map in detail...................................................................147
Step 17: Repeat steps 1 -16 with suitable modifications on Networks2 prior to passing traffic............147
Step 18: Test the IPSec tunnel between Networks1 and Networks2 by passing traffic from the 10.0.1.0
to the 10.0.2.0 network.........................................................................................................................147
Step 19: After transit traffic is passed through the tunnel, display the IKE and IPSec SA tables.........147
Example 3: Joining Two Networks with an IPSec Tunnel using Multiple IPSec Proposals...........................148
Step 1: Configure a WAN bundle of network type untrusted................................................................149
Step 2: Configure the Ethernet interface with trusted network type.....................................................149
Step 3: Display the crypto interfaces....................................................................................................149
Step 4: Add the route to the peer LAN.................................................................................................150
Step 5: Configure IKE to the peer gateway..........................................................................................150
6 Avaya Secure Router 1000 Series Configuration Guide December 2010