Avaya IP Office (R3.0) User Manual page 38

Page 38 - Configuration Examples
Task
Step 1
In order to establish IP connectivity,
configure the two systems using the
IP addressing details above.
Step 2
Check for IP Connectivity
Step 3
Install the IPSec licence.
Step 4
For IP Office A create an IPSec
tunnel.
Main tab
• Name = IPSec_Tunnel
• Local IP Address = 192.168.43.0
• Local IP Mask = 255.255.255.0
• Gateway - <LocalInterface>
• Remote IP Address =
192.168.50.0
• Remote IP Mask = 255.255.255.0
• Gateway = 217.37.69.116
Step 5
For IP Office A perform the
following.
IKE Polices tab
• Shared Secret = password
• Exchange Type = ID port
• Encryption = DES
• Authentication = MD5
• DH Group = Group 2
• Life Type = Seconds
• Life = 86400
Page 38 - Configuration Examples
Part 2: VPN configuration
Description
See the Basic Internet access section - Internet
Access using a Logical Interface on page 34.
Before beginning the configuration of the IPSec
element of this example it must be possible to perform
the following tasks.
• IP Office A: Ping the local ADSL router
• IP Office A: Ping the remote ADSL router
• IP Office A: Ping the remote IP Office B [1]
• IP Office A: Browse the Internet
• IP Office B: Browse the Internet
• IP Office B: Ping the local ADSL router
• IP Office B: Ping the remote ADSL router
• IP Office B: Ping the remote IP Office A [1]
[1] Assumes that the Firewall Profile is not active
on the receiving interface.
Do not proceed until all of these tests are successful.
It should not be possible to ping between the Internal
LANs at this stage.
An IPSec licence is required for each IP Office system
in an SA. Make sure the IPSec licences are valid on
both systems.
Licence name – IPSec Tunneling.
A unique name for the IPSec tunnel is required.
The Local IP Address/Mask is the range of IP
addresses you want to secure through the tunnel.
The Remote IP Address is the remote networks IP
address range to be secured through the tunnel.
The Gateway is the IPSec tunnel endpoint address.
Both tunnel endpoints must have the same-shared
secret.
Encryption set to DES.
Authentication set to MD5
Diffie-Hellman Group = Group 2
This is the time period before a new key is generated
(86400 represents one day in seconds).
40DHB0002UKER Issue 3 (4th February 2005)
IP Office (R3.0)