Avaya G250 Administration page 372

Configuring IPSec VPN
Note:
Do not specify an ambiguous ISAKMP peer, that is, do not configure an FQDN
Note:
that translates to an IP address which is already associated with another
ISAKMP peer.
G350-001# crypto isakmp peer address 149.49.70.1
G350-001(config-peer:149.49.70.1)#
Or
G350-001# crypto isakmp peer fqdn vpn.lnd.ny.avaya.com
G350-001(config-peer:vpn.lnd.ny.avaya.com)#
2. Enter a description for the peer.
G350-001(config-peer:149.49.70.1)# description "New York office"
Done!
3. Specify an ISAKMP policy to be used with the peer, using the isakmp policy command.
!
Important:
isakmp policy is a mandatory parameter.
Important:
G350-001(config-peer:149.49.70.1)# isakmp-policy 1
Done!
4. Enter the preshared key for peer authentication using the pre-shared-key command.
!
Important:
pre-shared-key is a mandatory parameter.
Important:
G350-001(config-peer:149.49.70.1)# pre-shared-key
Done!
Alternatively, you can obtain a cryptographic-grade random key from the G250/G350 using
the suggest-key command, and then enter it using the pre-shared-key command.
The suggested key-length can vary from 8-127 alphanumeric characters, or from 8-64 bytes
represented in hexadecimal notation. The default length is 32 characters.
G350-001(config-peer:149.49.70.1)# suggest-key 24
The suggest key: yjsYIz9ikcwaq0FUPTF3CIrw
G350-001(config-peer:149.49.70.1) pre-shared-key yjsYIz9ikcwaq0FUPTF3CIrw
Done!
372 Administration for the Avaya G250 and Avaya G350 Media Gateways
GNpi1odGNBrB5z4GJL