Avaya G250 Administration page 460

Configuring IPSec VPN
5. If you wish to work in IKE aggressive mode, use the initiate mode aggressive
command.
Note:
Aggressive mode is one of the prerequisites for working with dynamic local peer
Note:
IP addresses. For more information about working with dynamic local peer IP
addresses, see
G350-001(config-peer:149.49.70.1)# initiate mode aggressive
Done!
6. If you wish to listen in to communication from a remote peer that has a dynamic IP
address, use the initiate mode none command. In this mode the device can only
accept inbound IKE Aggressive Mode connections from the peer, and is not able to initiate
IKE phase-1 (Main Mode or Aggressive Mode) to the peer, nor is the peer able to
participate as part of a peer-group. In addition, specifying the continuous-channel
command when configuring the crypto isakmp peer information has no effect in this mode
(for more explanations on continuous-channel see
page 483).
7. Specify the branch device (G250/G350) by its address or by the FQDN name that
identifies the G250/G350 in the remote peer, using the self-identity command.
G350-001(config-peer:149.49.70.1)# self-identity address
Done!
Or
G350-001(config-peer:149.49.70.1)# self-identity fqdn vpn.avaya.com
Done!
Note:
Specifying self-identity as a name is one of the prerequisites for working with
Note:
dynamic local peer IP addresses. For more information about working with
dynamic local peer IP addresses, see
8. Enable DPD (Dead Peer Detection) keepalives that check whether the remote peer is up
using the keepalive command, followed by the number of seconds between DPD
keepalive probes, and the number of seconds between retries if keepalive fails. The
following example sets DPD keepalive to send probes every 10 seconds, and to send
retries every two seconds if DPD keepalive fails.
G350-001(config-peer:149.49.70.1)# keepalive 10 retry 2
Done!
460 Administration for the Avaya G250 and Avaya G350 Media Gateways
Using dynamic local peer IP on page 480.
Enabling continuous channel
Using dynamic local peer IP
on
on page 480.