Avaya G250 Administration page 465

Note:
Specifying the interface as a name is one of the prerequisites for working with
Note:
dynamic local peer IP addresses. For more information about working with
dynamic local peer IP addresses, see
3. Specify the name of the crypto-list using the name command.
G350-001(Crypto 901)# name "Public Network via ADSL"
Done!
4. Use the ip-rule command, followed by an index number between 1 and 1000, to enter
the context of an ip-rule (and to create the ip-rule if it does not exist).
!
Important:
It is mandatory to create at least one ip-rule.
Important:
G350-001(Crypto 901)# ip-rule 10
G350-001(Crypto 901/ip rule 10)#
5. Configure the following ip-rule parameters:
Use the description command to assign a description to the ip-rule.
●
To specify a range of source and destination IP addresses to which the rule applies,
●
use the commands source-ip and destination-ip, followed by the IP range
criteria. The IP range criteria can be any of the following:
- a single address — type host, followed by an IP address, to set a single IP
address to which the rule applies.
- wildcard — type host, followed by an IP address using wildcards, to set a range
of IP addresses to which the rule applies.
- any — type any to apply the rule to all IP addresses.
Use the no form of the appropriate command to return to the default value, any.
Define the action by specifying whether to protect traffic that matches the source and
●
destination addresses, using one of the following commands:
- no protect: do not protect traffic that matches the source and destination
addresses
Configuring a site-to-site IPSec VPN
Using dynamic local peer IP
Issue 3 February 2007
on page 480.
465