Avaya G430 Manual page 554

IPSec VPN
Root level
command
ip crypto-list
show crypto
ipsec sa
show crypto
ipsec
transform-set
show crypto
isakmp peer
554 Administering Avaya G430 Branch Gateway
First level Second level
command command
ip crypto-
group
ip-rule
descriptio
n
destinatio
n-ip
protect
crypto map
source-ip
local-
address
Comments? infodev@avaya.com
Description
Activate a crypto list in the
context of the interface on
which the crypto list is activated
Enter crypto list context and
create or edit a crypto list
Enter ip-rule context and create
or modify a specific rule
Enter a description for the ip-
rule in the ip crypto list
Specify the destination IP
address of packets to which the
current rule applies
Protect traffic that matches this
rule by applying the IPSec
processing configured by the
specific crypto map
Indicate that the current rule
applies to packets from the
specified source IP address
Set the local IP address for the
IPSec tunnels derived from this
crypto list
Display the IPSec SA database
and related runtime, statistical,
and configuration information
Note:
detail
The option in the
various show crypto
ipsec sa commands,
provides detailed counters
information on each IPSec
SA. To pinpoint the source of
a problem, it is useful to
check for a counter whose
value grows with time.
Display the configuration for the
specified transform-set or all
transform-sets
Display crypto ISAKMP peer
configuration
October 2013