Avaya G430 Manual page 553

Root level
command
crypto isakmp
suggest-key
crypto map
interface
(fastethernet
| dialer|vlan)
Administering Avaya G430 Branch Gateway
First level Second level
command command
hash
lifetime
continuous-
channel
description
set dscp
set peer
set peer-
group
set
transform-
set
crypto
ipsec df-
bit
crypto
ipsec
minimal-
pmtu
Description
Set the hash method for an
ISAKMP policy
Set the lifetime of the ISAKMP
SA in seconds
Generate a random string
which you can use as a pre-
shared key for IKE. You must
use the same key on both
peers.
Enter crypto map context and
create or edit a crypto map
In a crypto ISAKMP peer
context, enable continuous-
channel IKE, which keeps the
IKE phase1 session always up
and running, even if there is no
traffic
Enter a description for the
crypto map
Set the DSCP value in the
tunneled packet
Attach a peer to a crypto map
Attach a peer-group to a crypto
map
Configure the transform-set
Enter the FastEthernet, Dialer,
or VLAN interface context
Set the Don't-Fragment bit to
clear mode or copy mode
Set the minimal PMTU value
that can be applied to an SA
when the Branch Gateway
participates in PMTUD for the
tunnel pertaining to that SA
October 2013
IPSec VPN
553