Avaya G250 Administration page 400

Configuring IPSec VPN
Configuration example
Note:
The commands appearing in bold are the CLI commands that add the mesh
Note:
capabilities to the simple hub-and-spokes configuration.
1. Configure Branch Office 1:
crypto isakmp policy 1
crypto isakmp peer address <Main Office Public Internet Static IP
crypto isakmp peer address <Second Branch Office Public Internet Static
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
crypto map 1
crypto map 2
ip crypto-list 901
local-address <Branch Office Public Internet Static IP Address>
ip-rule 1
ip-rule 2
ip-rule 3
400 Administration for the Avaya G250 and Avaya G350 Media Gateways
encryption aes
hash sha
group 2
exit
pre-shared-key <secret key>
isakmp-policy 1
exit
pre-shared-key <secret key 2>
isakmp-policy 1
exit
set pfs 2
exit
set peer <Main Office Public Internet Static IP Address>
set transform-set ts1
exit
set peer <Second Branch Office Public Internet Static IP Address>
set transform-set ts1
exit
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip
protect crypto map 2
exit
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip
protect crypto map 2
exit
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip
protect crypto map 2
exit
<Second Branch Subnet1> <Second Branch
<Second Branch Subnet1> <Second Branch
<Second Branch Subnet2> <Second Branch
Address>
IP Address>
Subnet1 Mask>
Subnet1 Mask>
Subnet2 Mask>