Avaya G250 Administration page 505

Figure 46: Hub-and-spoke with hub redundancy/load sharing using GRE
Configuring VPN hub redundancy and load sharing topologies using GRE
1. Configure the Branch Office as follows:
VPN policy is configured on the Internet interface egress as follows:
●
GRE Traffic from the local tunnel endpoint to remote tunnel endpoint 1 -> encrypt,
using IPSec tunnel mode, with the remote peer being tunnel endpoint 1.
GRE Traffic from the local tunnel endpoint to remote tunnel endpoint 2 -> encrypt,
using IPSec tunnel mode, with the remote peer being tunnel endpoint 2.
An access control list (ACL) is configured on the Internet interface to allow only the
●
VPN / ICMP traffic, as follows:
For information about using access control lists, see the chapter
●
page 531. See
Note:
For information about using access control lists, see the chapter
Note:
policy on page 531.
Table 65 for configuration settings.
Typical installations
Configuring policy
Configuring
Issue 3 February 2007
on
505