Avaya G250 Administration page 463

1. Use the crypto map command, followed by an index number between 1 and 50, to enter
the context of a crypto map (and to create the crypto map if it does not exist).
G350-001# crypto map 1
G350-001(config-crypto:1)#
2. Enter a description for the crypto map, using the description command.
G350-001(config-crypto:1)# description "vpn lincroft branch"
Done!
3. Specify the remote peer, using the set peer command.
G350-001(config-crypto:1)# set peer 149.49.60.60
Done!
Or
Specify a peer-group, using the set peer-group command.
G350-001(config-crypto:1)# set peer-group NY-VPN-group
Done!
!
Important:
It is mandatory to specify either set peer or set peer-group, but not both.
Important:
4. Specify the specific transform-set to which this crypto map points, using the set
transform set command.
!
Important:
set transform set is a mandatory parameter.
Important:
G350-001(config-crypto:1)# set transform-set ts1
Done!
5. Set the static DSCP value in the DS field of the tunneled packet by using the set dscp
command, followed by a value between 0 and 63. The default setting is no set dscp,
which specifies that the DSCP is copied from the DS field of the original packet.
G350-001(config-crypto:1)# set dscp 38
Done!
Configuring a site-to-site IPSec VPN
Issue 3 February 2007 463