Configuring IPSec VPN
Policy Based Routing (PBR) is configured as follows, on VoIP VLAN and loopback
●
interfaces:
Note:
For information about Policy-Based Routing, see the chapter
Note:
policy-based routing
●
●
●
2. Configure the VPN Hub (Main Office) as follows:
The VPN policy portion for the branch is configured as a mirror image of the branch.
●
The ACL portion for the branch is a mirror image of the branch, with some minor
●
modifications.
Static routing is configured as follows:
●
Branch subnets -> Internet interface.
Policy Based Routing (PBR) portion for the branch is configured as follows, on most
●
interfaces:
- Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = bearer ->
- Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = control ->
ACM is configured to route voice calls through PSTN when the main VoIP trunk is
●
down.
498 Administration for the Avaya G250 and Avaya G350 Media Gateways
on page 553.
Destination IP = local subnets -> Route: DBR
DSCP = bearer -> Route: WAN
DSCP = control -> Route: 1. WAN 2. DBR
Route: WAN
Route: 1. WAN 2. DBR
Configuring