Avaya G430 Manual page 512

IPSec VPN
2. Specify no ip address and then ip address dhcp in the context of the
3. Exit the context of the interface, and set the interface name as the next hop.
An IPSec VPN connection exists as long as traffic is traversing the connection, or the timeouts
have not expired. However, there are advantages to keeping the connection continuously alive,
such as eliminating the waiting time necessary to construct a new IPSec VPN connection.
The Branch Gateway IPSec VPN feature supports continuous channel, which maintains a
continuous IPSec VPN connection. That means that when you activate the ip crypto-
group command on the defined interface, the IPSec VPN tunnel is immediately started, even
if no traffic is traversing the interface and the timeouts have expired.
About this task
You can set continuous channel for either or both IKE phase 1 and IKE phase 2, as follows:
Procedure
1. To set continuous channel for IKE phase 1, enter continuous-channel when
512 Administering Avaya G430 Branch Gateway
Gxxx-001(config-ACL 302/ip rule 25)# exit
Gxxx-001(config-ACL 302)# exit
!
! Activate the Ingress and Egress ACLs on the FastEthernet Interface
!
Gxxx-001(config)# interface fastethernet 10/3
Gxxx-001(config-if:FastEthernet 10/3)# ip access-group 301 in
Done!
Gxxx-001(config-if:FastEthernet 10/3)# ip access-group 302 out
Done!
FastEthernet Interface.
For example:
Gxxx-001(config-if:FastEthernet 10/3)# no ip address
no ip address defined on this interface
Gxxx-001(config-if:FastEthernet 10/3)# ip address dhcp
Done!
For example:
Gxxx-001(config-if:FastEthernet 10/3)#exit
Gxxx-001(config)# ip route 5.0.0.0 255.0.0.0 FastEthernet 10/3
Done!
Note:
For more information on DHCP client in the Branch Gateway, see
configuration on page 204.
Continuous channel
Enabling continuous channel
configuring the crypto ISAKMP peer information (see
information on page 489).
Comments? infodev@avaya.com
DHCP client
Configuring ISAKMP peer
October 2013