Avaya G430 Manual page 540

IPSec VPN
! Define the Ingress access control list for the public interface
!
ip access-control-list 301
ip-rule 5
source-ip
destination-ip
ip-protocol
udp destination-port eq Dns
composite-operation
exit
ip-rule 10
source-ip
destination-ip
ip-protocol
udp destination-port eq Ike
composite-operation
exit
ip-rule 11
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t
composite-operation permit
exit
ip-rule 12
source-ip any
destination-ip any
ip-protocol
udp destination-port eq Ike-nat-t-vsu
composite-operation permit
exit
ip-rule 20
source-ip
destination-ip
ip-protocol
composite-operation
exit
ip-rule 30
source-ip
destination-ip
ip-protocol
composite-operation
exit
ip-rule 40
source-ip
destination-ip
composite-operation
exit
ip-rule 50
source-ip
destination-ip
composite-operation
exit
ip-rule default
composite-operation deny
exit
exit
!
! Define the Egress access control list for the public interface
!
ip access-control-list 302
ip-rule 5
source-ip
destination-ip
ip-protocol
540 Administering Avaya G430 Branch Gateway
any
any
udp
Permit
any
any
udp
Permit
udp
udp
any
any
esp
Permit
any
any
icmp
Permit
any
10.0.10.0 0.0.0.255
Permit
any
10.0.20.0 0.0.0.255
Permit
any
any
udp
Comments? infodev@avaya.com
October 2013