Avaya G430 Manual page 520

IPSec VPN
ip-rule 50
ip-rule default
exit
interface vlan 1.1
ip-address <Branch Subnet1> <Branch Subnet1 Mask>
pmi
icc-vlan
exit
interface vlan 1.2
ip-address <Branch Subnet2> <Branch Subnet2 Mask>
exit
interface fastethernet 10/3
encapsulation PPPoE
traffic-shape rate 256000
ip Address <Branch Office Public Internet Static IP Address>
ip crypto-group
ip access-group
ip access-group
exit
ip default-gateway
Note:
The highlighted commands are the CLI commands that add the mesh capabilities to the
simple hub and spokes configuration.
crypto isakmp policy 1
encryption aes
hash sha
group 2
exit
crypto isakmp peer address <Main Office Public Internet Static IP
pre-shared-key
isakmp-policy 1
exit
crypto isakmp peer address <First Branch Office Public Internet Static IP
pre-shared-key
isakmp-policy 1
exit
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
set pfs 2
exit
crypto map 1
set peer <Main Office Public Internet Static IP Address>
set transform-set ts1
exit
crypto map 2
520 Administering Avaya G430 Branch Gateway
desintation-ip any
source-ip host <Branch Subnet1> <Branch Subnet1 Mask>
composite-operation Permit
exit
destination-ip any
source-ip host <Branch Subnet2> <Branch Subnet2 Mask>
composite-operation Permit
exit
composite-operation deny
exit
FastEthernet 10/3 high
Branch Office 2 configuration
Address>
<secret key>
Address>
<secret key 2>
Comments? infodev@avaya.com
<Branch Office Public Internet network mask>
901
301 in
302 out
October 2013