Avaya G250 Administration page 417

Figure 43: Hub-and-spoke with hub redundancy/load sharing using GRE
Avaya GW
G350
Branch
Office
Configuring VPN hub redundancy and load sharing topologies using GRE
This section describes how to configure the VPN Hub Redundancy/Load sharing topologies,
followed by a detailed configuration example.
To configure the VPN Hub Redundancy/Load sharing topologies:
1. Configure the Branch Office as follows:
VPN policy is configured on the Internet interface egress as follows:
●
GRE Traffic from the local tunnel endpoint to remote tunnel endpoint 1 -> encrypt, using
IPSec tunnel mode, with the remote peer being tunnel endpoint 1.
GRE Traffic from the local tunnel endpoint to remote tunnel endpoint 2 -> encrypt, using
IPSec tunnel mode, with the remote peer being tunnel endpoint 2.
An access control list (ACL) is configured on the Internet interface to allow only the VPN
●
/ ICMP traffic, as follows:
Note:
For information about using access control lists, see the chapter
Note:
policy on page 441.
IPSec VPN link
Ethernet
DSL or
Cable
modem
Access
Router +
termination
Internet
Access
Router +
termination
Typical installations
Primary Main
VPN
Office
VPN
Backup Main
Office
Configuring
Issue 1.1 June 2005 417