Avaya G250 Administration page 436

Configuring IPSec VPN
! Define the remote peers (3 main offices)
!
crypto isakmp peer address <First Main Office VPN address>
pre-shared-key <key1>
isakmp-policy 1
keepalive-track 1
exit
crypto isakmp peer address <Second Main Office VPN address>
pre-shared-key <key2>
isakmp-policy 1
keepalive-track 1
exit
crypto isakmp peer address <Third Main Office VPN address>
pre-shared-key <key3>
isakmp-policy 1
keepalive-track 1
exit
crypto isakmp peer-group main-hubs
set peer <First
set peer <Second Main Office VPN address>
set peer <Third
exit
!
! Define the IPSEC Entity
!
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
exit
!
! Define the VPN Tunnel
!
crypto map 1
set peer-group
set transform-set ts1
exit
! Define the crypto-list for the public interface
!
ip crypto-list 901
local-address "Fast Ethernet 10/2.0"
ip-rule 10
source-ip
destination-ip any
protect crypto map 1
exit
ip-rule 20
source-ip
destination-ip any
protect crypto map 1
exit
exit
436 Administration for the Avaya G250 and Avaya G350 Media Gateways
Main Office VPN address>
Main Office VPN address>
main-hubs
10.0.10.0 0.0.0.255
10.0.20.0 0.0.0.255