Avaya G250 Administration page 428

Configuring IPSec VPN
!
! Define the Ingress access control list for the public interface
!
ip access-control-list 301
ip-rule 5
source-ip
destination-ip
ip-protocol
udp destination-port eq Dns
composite-operation
exit
ip-rule 10
source-ip
destination-ip
ip-protocol
udp destination-port eq Ike
composite-operation
exit
ip-rule 11
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t
composite-operation permit
exit
ip-rule 12
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
ip-rule 20
source-ip
destination-ip
ip-protocol
composite-operation
exit
ip-rule 30
source-ip
destination-ip
ip-protocol
composite-operation
exit
ip-rule 40
source-ip
destination-ip
composite-operation
exit
ip-rule 50
source-ip
destination-ip
composite-operation
exit
428 Administration for the Avaya G250 and Avaya G350 Media Gateways
any
any
udp
Permit
any
any
udp
Permit
udp
udp
any
any
esp
Permit
any
any
icmp
Permit
any
10.0.10.0 0.0.0.255
Permit
any
10.0.20.0 0.0.0.255
Permit