Avaya G250 Administration page 394

Configuring IPSec VPN
! Deactivate the Ingress and Egress ACLs on the Fast Ethernet interface
!
G350-001(config)# interface FastEthernet 10/2
G350-001(config-if:FastEthernet 10/2)# no ip access-group in
Done!
G350-001(config-if:FastEthernet 10/2)# no ip access-group out
Done!
G350-001(config-if:FastEthernet 10/2)# exit
!
! Add a Permit rule to the Ingress ACL for DHCP
!
G350-001(config)# ip access-control-list 301
G350-001(config-ACL 301)# ip-rule 25
G350-001(config-ACL 301/ip rule 25)# source-ip any
Done!
G350-001(config-ACL 301/ip rule 25)# destination-ip any
Done!
G350-001(config-ACL 301/ip rule 25)# ip-protocol udp
Done!
G350-001(config-ACL 301/ip rule 25)# udp source-port eq bootps
Done!
G350-001(config-ACL 301/ip rule 25)# udp destination-port eq bootpc
Done!
G350-001(config-ACL 301/ip rule 25)# composite-operation permit
Done!
G350-001(config-ACL 301/ip rule 25)# exit
G350-001(config-ACL 301)# exit
!
! Add a Permit rule to the Egress ACL for DHCP
!
G350-001(config)# ip access-control-list 302
G350-001(config-ACL 302)# ip-rule 25
G350-001(config-ACL 302/ip rule 25)# source-ip any
Done!
G350-001(config-ACL 302/ip rule 25)# destination-ip any
Done!
G350-001(config-ACL 302/ip rule 25)# ip-protocol udp
Done!
G350-001(config-ACL 302/ip rule 25)# udp source-port eq bootpc
Done!
G350-001(config-ACL 302/ip rule 25)# udp destination-port eq bootps
Done!
G350-001(config-ACL 302/ip rule 25)# composite-operation permit
Done!
G350-001(config-ACL 302/ip rule 25)# exit
G350-001(config-ACL 302)# exit
!
! Activate the Ingress and Egress ACLs on the Fast Ethernet interface
!
G350-001(config)# interface FastEthernet 10/2
G350-001(config-if:FastEthernet 10/2)# ip access-group 301 in
Done!
G350-001(config-if:FastEthernet 10/2)# ip access-group 302 out
Done!
394 Administration for the Avaya G250 and Avaya G350 Media Gateways