Avaya 1000 Series Configuration Manual page 7

Step 6: Display the IKE policies............................................................................................................150
Step 7: Display the IKE policies in detail..............................................................................................150
Step 8: Configure IPSec tunnel to the remote host..............................................................................151
Step 9: Display the IPSec policies........................................................................................................151
Step 10: Configure firewall policies to allow IKE negotiation through untrusted interface....................151
Step 11: Display firewall policies in the Internet map...........................................................................152
Step 12: Display firewall policies in the Internet map in detail..............................................................152
Step 13: Configure firewall policies to allow transit traffic from remote LAN to the local LAN..............152
Step 14: Display firewall policies in the corp map................................................................................152
Step 15: Display firewall policies in the corp map in detail...................................................................152
Step 16: Repeat steps 1 -15 with suitable modifications on Networks2 prior to passing bi-directional traffic
..............................................................................................................................................................153
Step 17: Test the IPSec tunnel between Networks1 and Networks2 by passing traffic from the 10.0.1.0
network to the 10.0.2.0 network...........................................................................................................153
Step 18: After traffic is passed through the tunnel, display the IKE and IPSec SA tables....................153
Example 4: Supporting Remote User Access...............................................................................................153
Step 1: Configure a WAN bundle of network type untrusted................................................................154
Step 2: Configure the Ethernet interface with trusted network type.....................................................154
Step 3: Display the crypto interfaces....................................................................................................155
Step 4: Configure dynamic IKE policy for a group of mobile users......................................................155
Step 5: Display dynamic IKE policies...................................................................................................155
Step 6: Display dynamic IKE policies in detail......................................................................................156
Step 7: Configure dynamic IPSec policy for a group of mobile users...................................................156
Step 8: Display dynamic IPSec policies...............................................................................................156
Step 9: Display dynamic IPSec policies in detail..................................................................................156
Step 10: Configure radius server (applicable only if client authentication is configured in dynamic IKE
policy)...................................................................................................................................................157
Step 11: Configure firewall policies to allow IKE negotiation through untrusted interface....................157
Step 12: Display firewall policies in the Internet map...........................................................................157
Step 13: Display firewall policies in the Internet map in detail..............................................................157
Step 14: Configure firewall policies for a group of mobile users to allow access to the local LAN.......158
Step 15: Display firewall policies in the corp map................................................................................158
Step 16: Display firewall policies in the corp map in detail...................................................................158
Step 17: Test the IPSec tunnel between the VPN client and the server by passing traffic from the client
to the 10.0.1.0 network.........................................................................................................................158
Step 18: After passing traffic through the tunnel, display the list of clients logged onto the VPN server and
the IKE and IPSec SA tables................................................................................................................158
Example 5: Configuring IPSec Remote Access to Corporate LAN with Mode-Configuration Method..........159
Step 1: Configure a WAN bundle of network type untrusted................................................................160
Step 2: Configure the Ethernet interface with trusted network type.....................................................160
Step 3: Display the crypto interfaces....................................................................................................161
Step 4: Configure dynamic IKE policy for a group of mobile users......................................................161
Step 5: Display dynamic IKE policies...................................................................................................161
Step 6: Display dynamic IKE policies in detail......................................................................................162
Step 7: Configure dynamic IPSec policy for a group of mobile users...................................................162
Step 8: Display dynamic IPSec policies...............................................................................................162
Step 9: Display dynamic IPSec policies in detail..................................................................................162
Step 10: Configure firewall policies to allow IKE negotiation through untrusted interface....................163
Step 11: Display firewall policies in the Internet map...........................................................................163
Step 12: Display firewall policies in the Internet map in detail..............................................................163
Step 13: Configure firewall policies for a group of mobile users to allow access to the local LAN.......163
Step 14: Display firewall policies in the corp map................................................................................164
Avaya Secure Router 1000 Series Configuration Guide December 2010 7