Avaya G250 Administration page 422

Configuring IPSec VPN
ip-rule 70
ip-rule default
exit
interface Vlan 1
description "VoIP_VLAN"
ip address <branch voice subnet IP address> <branch voice subnet mask>
icc-vlan
pmi
exit
interface Vlan 2
description "DATA_VLAN"
ip address <branch data subnet IP address> <branch data subnet mask>
exit
interface FastEthernet 10/2
encapsulation pppoe
traffic-shape rate 256000
ip address <Branch Office Internet public Static IP Address> <Branch
ip crypto-group 901
ip access-group
ip access-group
exit
interface Tunnel 1
!
! The following two backup commands specify redundant mode.
! To specify load-sharing mode, omit them.
!
backup interface Tunnel 2
backup delay 20 15
keepalive 10 3
tunnel source
tunnel destination <Primary MainPrimary Main Office GRE Tunnel end
ip address 10.10.10.1 255.255.255.252
exit
interface Tunnel 2
keepalive 10 3
tunnel source
tunnel destination <Backup Main Office GRE Tunnel end point IP
ip address 20.20.20.1 255.255.255.252
exit
422 Administration for the Avaya G250 and Avaya G350 Media Gateways
source-ip host <Branch GRE Tunnel end point IP Address>
destination-ip host <Backup Main Office GRE Tunnel end
composite-operation
exit
composite-operation
exit
301 in
302 out
<Branch GRE Tunnel end point IP Address>
<Branch GRE Tunnel end point IP Address>
point IP Address>
Permit
deny
Office Internet public net mask>
point IP Address>
Address>