Avaya Media Gateway G250, Administration Manual

Page: 562 / 840

Configuring IPSec VPN
562 Administration for the Avaya G250 and Avaya G350 Media Gateways
!
Important:
Important:
isakmp policy
is a mandatory command.
For example:
4. Enter the preshared key for peer authentication using the
pre-shared-key
command.
!
Important:
Important:
pre-shared-key
is a mandatory command.
For example:
Alternatively, you can obtain a cryptographic-grade random key from the G250/G350 with
the
suggest-key
command, and then enter it using the
pre-shared-key
command.
The suggested key-length can vary from 8-127 alphanumeric characters, or from 8-64
bytes represented in hexadecimal notation. The default length is 32 characters.
For example:
5. If you wish to work in IKE aggressive mode, use the
initiate mode aggressive
command.
Note:
Note:
Aggressive mode is one of the prerequisites for working with dynamic local peer
IP addresses. For more information about working with dynamic local peer IP
addresses, see
Using dynamic local peer IP on page 582.
For example:
G350-001(config-peer:149.49.70.1)# isakmp-policy 1
Done!
G350-001(config-peer:149.49.70.1)# pre-shared-key
GNpi1odGNBrB5z4GJL
Done!
G350-001(config-peer:149.49.70.1)# suggest-key 24
The suggest key: yjsYIz9ikcwaq0FUPTF3CIrw
G350-001(config-peer:149.49.70.1) pre-shared-key yjsYIz9ikcwaq0FUPTF3CIrw
Done!
G350-001(config-peer:149.49.70.1)# initiate mode aggressive
Done!