Avaya G250 Administration page 525

38. Configure packet forwarding:
static routes. Use the ip route command.
●
dynamic routes learned via RIP and/or OSPF.
●
policy based routing lists.
●
G350-N(super)# ip route 200.200.200.0 24 tunnel 1 low
Done!
G350-N(super)# ip route 149.49.70.0 24 tunnel 1 low
Done!
G350-N(super)# ip route 20.0.0.0 24 10.0.0.2 low
Done!
G350-N(super)# ip route 20.0.0.2 32 FastEthernet 10/2 low
Done!
39. List all defined VPN peers, and delete all redundant VPN peers.
a. Use the show crypto isakmp peer command to list all VPN peers.
G350-001(super)# show crypto isakmp peer
Description Peer identity
----------- ----------------- ----------------- ---- --- -- ----- ----- ---
San Jose 111.110.110.112
New Jersey 149.49.70.1
b. Use the no crypto isakmp peer address command to delete redundant VPN
peers.
G350-001(super)# no crypto isakmp peer address 149.49.70.1
Done!
40. Configure IKE phase 1 (ISAKMP policy) using the crypto isakmp policy command.
Diffie-Hellman group 2, 5 or 14. You may not specify Diffie-Hellman group 1.
●
HMAC-SHA-1.
●
3DES, AES-128, AES-192, or AES-256.
●
Use DES only for communication with legacy products that do not support AES or 3DES.
G350-N(super)# crypto isakmp policy 1
G350-N(super-isakmp:1)# encryption 3des
Done!
G350-N(super-isakmp:1)# hash sha
Done!
G350-N(super-isakmp:1)# group 2
Done!
G350-N(super-isakmp:1)# exit
Self identity Auth Plc Md DPD
IPv4 Address
vpn.ca.avaya.com psk
Administration procedures
Track Cnt
K-alv Id
psk 2 MM none
5 AM on-de 5
Issue 1.1 June 2005
No
No
525