Configuring Isakmp Peer Information - Avaya G250 Administration

G350-001001(config-transform:ts1ts1)# set pfs group2
Done!
G350-001(config-transform:ts1)# set security-association lifetime seconds
7200
Done!
G350-001(config-transform:ts1)# set security-association lifetime
kilobytes 268435456
G350-001(config-transform:ts1)# mode tunnel
Done!
3. Exit the crypto transform-set context using the exit command.
G350-001(config-transform:ts1)# exit
G350-001#

Configuring ISAKMP peer information

ISAKMP peer information defines the remote peer identification, the pre-shared key used for
peer authentication, and the ISAKMP policy to be used for IKE phase 1 negotiations between
the peers.
!
Important:
It is mandatory to define at least one ISAKMP peer.
Important:
Note:
You can define up to 50 ISAKMP peers.
Note:
To configure peer information:
1. Use the crypto isakmp peer command, followed by the address of the ISAKMP peer or
its FQDN (Fully Qualified Domain Name), to enter the context of an ISAKMP peer (and to
create the peer if it does not exist).
Note:
If you wish to specify the ISAKMP peer by its FQDN name, you must configure
Note:
the G250/G350 as a DNS client (see
that the peer's name is listed in a DNS server.
Configuring a site-to-site IPSec VPN
DNS Resolver on page 65), and make sure
Issue 1.1 June 2005 371