Avaya G430 Manual page 516

IPSec VPN
Traffic
direction
Ingress
Ingress
Ingress
Ingress
Egress
Egress
Egress
Egress
Egress
Egress
Egress
Traffic
direction
Ingress
Ingress
Ingress
Ingress
Ingress
516 Administering Avaya G430 Branch Gateway
ACL parameter
ESP from Second Branch IP
to Branch IP
ICMP from any IP address to
local tunnel endpoint
All allowed services from any
IP address to any local
subnet
Default
IKE from Branch IP to Main
Office IP
ESP from Branch IP to Main
Office IP
IKE from Branch IP to
Second Branch IP
ESP from Branch IP to
Second Branch IP
ICMP from local tunnel
endpoint to any IP address
All allowed services from any
local subnet to any IP
address
Default
Mesh VPN topology – Branch Office 2
ACL parameter
IKE from Main Office IP to
Branch IP
ESP from Main Office IP to
Branch IP
IKE from First Branch IP to
Branch IP
ESP from First Branch IP to
Branch IP
ICMP from any IP address to
local tunnel endpoint
Comments? infodev@avaya.com
ACL Description
value
Permit -
Permit This enables the PMTUD
application to work
Permit Due to the definition of the VPN
Policy, this will be allowed only if
traffic comes over ESP
Deny -
Permit -
Permit -
Permit This enables the PMTUD
application to work
Permit This traffic is tunnelled using VPN
Permit This enables the PMTUD
application to work
Permit This traffic is tunnelled using VPN
Deny -
ACL
value
Permit -
Permit -
Permit -
Permit -
Permit This enables the PMTUD
application to work
Description
October 2013