Avaya G250 Administration page 486

Media gateways

Hide thumbs Also See for G250:

Table of Contents

Configuring IPSec VPN

Table 62: Configuring the mesh VPN topology - branch 1 (continued)

2. Configure branch office 2 as follows:

The default gateway is the Internet interface.

VPN policy is configured on the Internet interface egress as follows:

- Traffic from the local subnets to the First Spoke subnets -> encrypt, using tunnel

- Traffic from the local subnets to any IP address -> encrypt, using tunnel mode

An access control list (ACL) is configured on the Internet interface to allow only the

VPN / ICMP traffic. See

For information about using access control lists, see

Table 63: Configuring the mesh VPN topology - branch 2

486 Administration for the Avaya G250 and Avaya G350 Media Gateways

ACL parameter

IKE from Branch IP to

Second Branch IP

ESP from Branch IP to

Second Branch IP

ICMP from local tunnel

endpoint to any IP

All allowed services from

any local subnet to any IP

mode IPSec, with the remote peer being the First Spoke.

with the remote peer being the Main Office (VPN hub)

on page 531.

ACL parameter

IKE from Main Office IP to

ESP from Main Office IP to

This allows the PMTUD

application to work.

This traffic is tunnelled using

This allows the PMTUD

application to work.

This traffic is tunnelled using

for configuration settings.

Chapter 20: Configuring