Avaya G430 Manual page 496

IPSec VPN
3. Specify the name of the crypto list using the name command.
4. Use the ip-rule command, followed by an index number from 1 to 1000, to enter
5. Configure ip-rule parameters as follows:
496 Administering Avaya G430 Branch Gateway
Examples:
Gxxx-001(Crypto 901)# local-address 192.168.49.1
Done!
Gxxx-001(Crypto 901)# local-address FastEthernet 10/3
Done!
Note:
Specifying the interface as a name is one of the prerequisites for working with
dynamic local peer IP addresses. For more information about working with
dynamic local peer IP addresses, see
For example:
Gxxx-001(Crypto 901)# name "Public Network via ADSL"
Done!
the context of an ip-rule and to create the ip-rule if it does not exist.
Important:
It is mandatory to create at least one ip-rule.
For example:
Gxxx-001(Crypto 901)# ip-rule 10
Gxxx-001(Crypto 901/ip rule 10)#
• Use the description command to assign a description to the ip-rule.
• To specify a range of source and destination IP addresses to which the rule
applies, use the source-ip and destination-ip commands, followed by
the IP range criteria. The IP range criteria can be one of the following:
- single address: . Type host, followed by an IP address, to set a single
IP address to which the rule applies.
- wildcard: . Type host, followed by an IP address using wildcards, to set
a range of IP addresses to which the rule applies.
- All addresses: . Type any to apply the rule to all IP addresses.
• Use the no form of the appropriate command to return to the default value,
any.
• Define the action by specifying whether to protect traffic that matches the
source and destination addresses, using one of the following commands:
- no protect. Do not protect traffic that matches the source and
destination addresses.
- protect crypto map crypto-map-id. Protect traffic that matches
the source and destination addresses. The specified crypto map specifies
Comments? infodev@avaya.com
Dynamic local peer IP on page 509.
October 2013