Avaya G250 Administration page 515

!
! Define the remote peer as FQDN (DNS Name)
!
crypto isakmp peer fqdn main-vpn.avaya.com
pre-shared-key <key1>
isakmp-policy 1
exit
!
! Define the IPSEC Entity
!
crypto ipsec transform-set ts1 esp-3des esp-sha-hmac
exit
!
! Define the VPN Tunnel
!
crypto map 1
set peer main-vpn.avaya.com
set transform-set ts1
exit
!
! Define the crypto-list for the public interface
!
ip crypto-list 901
local-address "Fast Ethernet 10/2.0"
!
! ip-rule 5 allows un-encrypted traffic for DNS
!
ip-rule 5
source-ip
destination-ip 123.124.125.126
no protect
exit
ip-rule 10
source-ip
destination-ip any
protect crypto map 1
exit
ip-rule 20
source-ip
destination-ip any
protect crypto map 1
exit
exit
any
10.0.10.0 0.0.0.255
10.0.20.0 0.0.0.255
Typical installations
Issue 3 February 2007 515