Avaya G430 Manual page 521

set peer <First Branch Office Public Internet Static IP Address>
set transform-set ts1
exit
ip crypto-list 901
local-address <Branch Office Public Internet Static IP Address>
ip-rule 1
ip-rule 2
ip-rule 3
ip-rule 4
ip-rule 10
ip-rule 20
exit
ip access-control-list 301
ip-rule 10
ip-rule 11
ip-rule 12
Administering Avaya G430 Branch Gateway
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip <First Branch Subnet1> <Second Branch
Subnet1 Mask>
protect crypto map 2
exit
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip <First Branch Subnet1> <Second Branch
Subnet1 Mask>
protect crypto map 2
exit
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip <First Branch Subnet2> <Second Branch
Subnet2 Mask>
protect crypto map 2
exit
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip <First Branch Subnet2> <Second Branch
Subnet2 Mask>
protect crypto map 2
exit
source-ip <Branch Subnet1> <Branch Subnet1 Mask>
destination-ip
protect crypto map 1
exit
source-ip <Branch Subnet2> <Branch Subnet2 Mask>
destination-ip
protect crypto map 1
exit
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike
composite-operation Permit
exit
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t
composite-operation permit
exit
source-ip any
destination-ip any
any
any
udp
IPSec VPN
October 2013 521