Avaya G430 Manual page 548

IPSec VPN
ip-rule default
composite-operation deny
exit
exit
!
! Activate the crypto list and the access control list on the public
interface
!
interface fastethernet 10/3
ip crypto-group 901
ip access-group 301 in
ip access-group 302 out
exit
Checklist for configuring site-to-site IPSec VPN
Use the following table to gather the information for simple Gateway site-to-site IPSec VPN.
1. Type of connection to the ISP
2. VPN Interface
3. VPN Local IP Address
4. Coordinating with the VPN Remote peer
a.) VPN IKE (Control) Phase 1 Parameters
— Encryption
— Authentication Hash
548 Administering Avaya G430 Branch Gateway
Parameter
Comments? infodev@avaya.com
Possible values
• ADSL
• Cable Modem
• FastEthernet10/3
• Serial port X/Y
Type:
• Static
– If static, provide:
IP Address
Mask
Next-hop Router
• Dynamic (DHCP/PPPoE)
• des
• 3des
• aes
• aes-192
• aes-256
• sha
• md5
Actual value
October 2013