Avaya G430 Manual page 533

pre-shared-key
isakmp-policy 1
exit
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
exit
crypto map 1
set peer <Primary Main Office Internet public Static IP Address>
set transform-set ts1
exit
crypto map 2
set peer <Backup Main Office Internet public Static IP Address>
set transform-set ts1
exit
ip crypto-list 901
local-address <Branch Office Internet public Static IP Address>
ip-rule 1
source-ip host <Branch GRE Tunnel end point IP Address>
destination-ip host <Primary Main Office GRE Tunnel end point IP
protect crypto map 1
exit
ip-rule 2
source-ip host <Branch GRE Tunnel end point IP Address>
destination-ip host <Backup Main Office GRE Tunnel end point
protect crypto map 2
exit
exit
ip access-control-list 301
ip-rule 30
ip-rule 31
ip-rule 32
ip-rule 40
ip-rule 50
Administering Avaya G430 Branch Gateway
IP Address>
<key2>
Address>
IP Address>
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike
composite-operation
exit
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t
composite-operation permit
exit
source-ip any
destination-ip any
ip-protocol udp
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
source-ip any
destination-ip any
ip-protocol esp
composite-operation
exit
source-ip any
destination-ip host
IP Address>
Permit
Permit
<Branch Office Public Internet Static
IPSec VPN
October 2013 533