Avaya G430, Manual

Page: 496 / 696

Examples:
Gxxx-001(Crypto 901)# local-address 192.168.49.1
Done!
Gxxx-001(Crypto 901)# local-address FastEthernet 10/3
Done!
Note:
Specifying the interface as a name is one of the prerequisites for working with
dynamic local peer IP addresses. For more information about working with
dynamic local peer IP addresses, see
Dynamic local peer IP on page 509.
3. Specify the name of the crypto list using the
name
command.
For example:
Gxxx-001(Crypto 901)# name “Public Network via ADSL”
Done!
4. Use the
ip-rule
command, followed by an index number from 1 to 1000, to enter
the context of an ip-rule and to create the ip-rule if it does not exist.
Important:
It is mandatory to create at least one ip-rule.
For example:
Gxxx-001(Crypto 901)# ip-rule 10
Gxxx-001(Crypto 901/ip rule 10)#
5. Configure ip-rule parameters as follows:
• Use the
description
command to assign a description to the ip-rule.
• To specify a range of source and destination IP addresses to which the rule
applies, use the
source-ip
and
destination-ip
commands, followed by
the IP range criteria. The IP range criteria can be one of the following:
- single address: . Type
host
, followed by an IP address, to set a single
IP address to which the rule applies.
- wildcard: . Type
host
, followed by an IP address using wildcards, to set
a range of IP addresses to which the rule applies.
- All addresses: . Type
any
to apply the rule to all IP addresses.
• Use the
no
form of the appropriate command to return to the default value,
any.
• Define the action by specifying whether to protect traffic that matches the
source and destination addresses, using one of the following commands:
-
no protect
. Do not protect traffic that matches the source and
destination addresses.
-
protect crypto map crypto-map-id
. Protect traffic that matches
the source and destination addresses. The specified crypto map specifies
IPSec VPN
496 Administering Avaya G430 Branch Gateway October 2013
Comments? infodev@avaya.com