Avaya G430 Manual page 551

Root level
command
crypto ipsec
nat-
transparency
udp-
encapsulation
crypto ipsec
transform-set
crypto isakmp
invalid-spi-
recovery
crypto isakmp
nat keepalive
crypto isakmp
peer
Administering Avaya G430 Branch Gateway
First level Second level
command command
mode
set pfs
set
security-
association
lifetime
continuous-
channel
description
initiate
mode
Description
Re-enable NAT Traversal if it
was disabled
Enter the IKE phase 2 (IPSec)
transform-set context and
create or edit IPSec
parameters for the VPN tunnel
Set security-association
lifetime
Specify whether each IKE
phase 2 negotiation will employ
PFS and, if yes, which Diffie-
Hellman group to employ
Set the IKE phase 2 (IPSec) SA
lifetime
Enable invalid SPI recovery
(default setting)
Re-enable NAT Traversal
keepalive if it was disabled, and
configure the keepalive
interval. This command keeps
the NAT devices tables
updated.
Enter the crypto ISAKMP peer
context and create or edit an
ISAKMP peer
Enable continuous-channel
IKE, which keeps the IKE
phase1 session always up and
running, even if there is no
traffic
Enter a description for the
ISAKMP peer
Specify which IKE Phase-1
mode to use when
October 2013
IPSec VPN
551