Avaya G430 Manual page 524

IPSec VPN
Full solution: hub-and-spoke with VPN for data and VoIP control backup
Related topics:
Configuring hub-and-spoke with VPN for data and VoIP control backup
Hub-and-spoke with VPN
Hub-and-spoke with VPN example
Procedure
1. Configure the Branch Office as follows:
524 Administering Avaya G430 Branch Gateway
on page 525
Configuring hub-and-spoke with VPN for data and VoIP control backup
• The default gateway is the Internet interface.
• VPN policy is configured on the Internet interface egress as follows: Traffic
from the local GRE tunnel endpoint to the remote GRE tunnel endpoint >
encrypt, using IPSec tunnel mode, with the remote peer being the Main
Office.
• An access control list (ACL) is configured on the Internet interface to allow only
the VPN tunnel and ICMP traffic. See
for data and VoIP control backup
Note:
For information about using access control lists, see
page 557.
• Policy Based Routing (PBR) is configured as follows on VoIP VLAN and
loopback interfaces:
- Destination IP = local subnets > Route: DBR
Comments? infodev@avaya.com
on page 526
Configuring hub-and-spoke with VPN
on page 524 for configuration settings.
on page 524
Policy lists on
October 2013