Avaya G250 Administration page 527

44. Define one or more IPSec Crypto lists that provide encryption rules for traffic that needs
protection. Use the ip crypto-list command.
G350-N(super)# ip crypto-list 901
G350-N(super-Crypto 901)# local-address "FastEthernet 10/2.0"
Done!
G350-N(super-Crypto 901)# ip-rule 10
G350-N(super-Crypto 901/ip rule 10)# protect crypto map 1
Done!
G350-N(super-Crypto 901/ip rule 10)# source-ip any
Donw!
G350-N(super-Crypto 901/ip rule 10)# destination-ip any
Done!
G350-N(super-Crypto 901/ip rule 10)# exit
G350-N(super-Crypto 901)#exit
G350-N(super)# ip crypto-list 902
G350-N(super-Crypto 902)# local-address "serial 2/1:1"
Done!
G350-N(super-Crypto 902)# ip-rule 10
Done!
G350-N(super-Crypto 902/ip rule 10)# protect crypto map 2
Done!
G350-N(super-Crypto 902/ip rule 10)# source-ip any
Done!
G350-N(super-Crypto 902/ip rule 10)# destination-ip any
Done!
G350-N(super-Crypto 902/ip rule 10)# exit
G350-N(super-Crypto 902)#exit
45. Verify that the Crypto Maps are configured as desired, using the show ip crypto-list
command.
Index Description
----- ------------------------------- ---------
901 list #901
Local address: "FastEthernet 10/2.0"
Rules:
Index Protocol
----- -----------
10 Any
Deflt Any
Applicable crypto maps:
Id Description
-- ---------------
1
Status
valid
IP
--- ---------------- -----------
Src Any
Dst Any
Src Any
Dst Any
Remote peer Transform-set
-------------- --------------------
20.0.0.2 ts1
Administration procedures
Owner
--------------------------
other
Wildcard Action
-------
protect
bypass
DSCP
--------
copy
Issue 1.1 June 2005
Crypto map
----------
1
-
527