Configuring IPSec VPN
2. Configure the VPN Hub (Main Office) as follows:
The VPN policy portion for the branch is configured as a mirror image of the branch.
●
The ACL portion for the branch is a mirror image of the branch, with some minor
●
modifications.
Static routing is configured as follows:
●
Branch subnets -> Internet interface.
Policy Based Routing (PBR) portion for the branch is configured as follows, on most
●
interfaces:
Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = bearer ->
●
Route: WAN
Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = control ->
●
Route: 1. WAN 2. DBR
ACM is configured to route voice calls through PSTN when the main VoIP trunk is down.
●
410 Administration for the Avaya G250 and Avaya G350 Media Gateways