Avaya G430 Manual page 507

Traffic direction
Egress
Egress
crypto isakmp policy 1
encryption aes
hash sha
group 2
exit
crypto isakmp peer address <Main Office Public Internet Static IP Address>
pre-shared-key
isakmp-policy 1
exit
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
set pfs 2
exit
crypto map 1
set peer <Main OfficeMain Office Public Internet Static IP
set transform-set ts1
exit
ip crypto-list 901
local-address <Branch Office Public Internet Static IP Address>
ip-rule 10
ip-rule 20
exit
ip access-control-list 301
ip-rule 10
ip-rule 11
ip-rule 12
ip-rule 20
Administering Avaya G430 Branch Gateway
ACL parameter
All allowed services
from any IP address to
any local subnet
Default
Simple VPN topology example
<secret key>
Address>
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip
protect crypto map 1
exit
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip
protect crypto map 1
exit
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike
composite-operation Permit
exit
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t
composite-operation permit
exit
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
ACL value
Permit
Deny
any
any
udp
udp
Description
This traffic is tunnelled using
VPN
-
October 2013
IPSec VPN
507