Avaya G250 Administration page 376

Configuring IPSec VPN
3. Specify the remote peer, using the set peer command.
G350-001(config-crypto:1)# set peer 149.49.60.60
Done!
Or
Specify a peer-group, using the set peer-group command.
G350-001(config-crypto:1)# set peer-group NY-VPN-group
Done!
!
Important:
It is mandatory to specify either set peer or set peer-group, but not both.
Important:
4. Specify the specific transform-set to which this crypto map points, using the set
transform set command.
!
Important:
set transform set is a mandatory parameter.
Important:
G350-001(config-crypto:1)# set transform-set ts1
Done!
5. Set the static DSCP value in the DS field of the tunneled packet by using the set dscp
command, followed by a value between 0 and 63. The default setting is no set dscp,
which specifies that the DSCP is copied from the DS field of the original packet.
G350-001(config-crypto:1)# set dscp 38
Done!
6. Specify whether to enable continuous-channel IPSec (IKE phase 2), using the
continuous-channel command. The default setting is no continuous-channel,
which disables continuous-channel IPSec. For more explanations on continuous-channel
see Enabling continuous channel
G350-001(config-crypto:1)# continuous-channel
Done!
7. Exit crypto map context using the exit command.
G350-001(config-crypto:1)# exit
G350-001#
376 Administration for the Avaya G250 and Avaya G350 Media Gateways
on page 395.