Avaya G430 Manual page 510

IPSec VPN
Prerequisites for dynamic local peer IP
• Specify IKE aggressive mode with the initiate mode aggressive command when
entering the ISAKMP peer information (see
page 489).
Gxxx-001(config-peer:149.49.70.1)# initiate mode aggressive
Done!
• Specify the local device by its FQDN name, using the self-identity command, when
entering the ISAKMP peer information (see
page 489). For example:
Gxxx-001(config-peer:149.49.70.1)# self-identity fqdn vpn.avaya.com
Done!
• Specify the local address by name in the ip crypto lists, using the local-address
command (see
by interface name. For example:
Gxxx-001(Crypto 901)# local-address FastEthernet 10/3
Done!
Configuring dynamic local peer IP on a PPPoE interface
Procedure
1. Enter the context of the FastEthernet interface.
2. Enter the following commands in the context of the interface: no ip address,
3. Exit the context of the interface, and set the interface name as the next hop.
510 Administering Avaya G430 Branch Gateway
Configuring crypto lists
For example:
Gxxx-001(config)# interface fastethernet 10/3
Gxxx-001(config-if:FastEthernet 10/3)#
encapsulation pppoe, and ip address negotiated.
Gxxx-001(config-if:FastEthernet 10/3)# no ip address
Done!
Gxxx-001(config-if:FastEthernet 10/3)# encapsulation pppoe
Done!
Gxxx-001(config-if:FastEthernet 10/3)# ip address negotiated
Done!
For example:
Gxxx-001(config-if:FastEthernet 10/3)# exit
Gxxx-001(config)# ip default-gateway FastEthernet 10/3
Done!
Note:
PPP over Ethernet (PPPoE) is a client-server protocol used for carrying PPP-
encapsulated data over Ethernet frames. You can configure PPPoE on the
Branch Gateway's ETH WAN Fast Ethernet port. For more information about
PPPoE on the Branch Gateway, see
Comments? infodev@avaya.com
Configuring ISAKMP peer information
Configuring ISAKMP peer information
on page 495). You must specify the local address
Configuring PPPoE
on
on
on page 252.
October 2013