Avaya G430 Manual page 523

ip-rule 40
ip-rule 50
ip-rule default
exit
interface vlan 1.1
ip-address <Branch Subnet1> <Branch Subnet1 Mask>
pmi
icc-vlan
exit
interface vlan 1.2
ip-address <Branch Subnet2> <Branch Subnet2 Mask>
exit
interface fastethernet 10/3
encapsulation PPPoE
traffic-shape rate 256000
ip Address
network mask>
ip crypto-group
ip access-group
ip access-group
exit
ip default-gateway
Note:
The highlighted commands are the CLI commands that add the mesh capabilities to the
simple hub and spokes configuration.
Full solution: hub and spoke with VPN
The full solution consists of a hub-and-spoke with VPN for data and VoIP control backup.
In this topology:
• There is a direct WAN connection, through an external layer 3 router in the branch, to the
Main Office for VoIP bearer and as primary VoIP control connection. The layer 3 router
is connected to the G430 through a dedicated VLAN interface.
• The Broadband Internet connection uses cable or DSL modem, with a static public IP
address
• There is a VPN tunnel to the hub over the Internet for intranet data, and as backup
connection for VoIP control
• The local hosts access the Internet directly through the local broadband connection
• The PSTN connection backs up the voice bearer
Administering Avaya G430 Branch Gateway
exit
desintation-ip any
source-ip host <Branch Subnet1> <Branch Subnet1 Mask>
composite-operation Permit
exit
destination-ip any
source-ip host <Branch Subnet2> <Branch Subnet2 Mask>
composite-operation Permit
exit
composite-operation deny
exit
<Branch Office Public Internet Static IP Address>
901
301 in
302 out
FastEthernet 10/3 high
<Branch Office Public Internet
IPSec VPN
October 2013 523