Avaya Media Gateway G250, Administration Manual

Page: 564 / 840

Configuring IPSec VPN
564 Administration for the Avaya G250 and Avaya G350 Media Gateways
Note:
Note:
DPD and object tracking can coexist and augment each other. However, object
tracking does not impose any requirements on the remote peer. You can,
therefore, use object tracking rather than DPD keepalives if the remote peer does
not support DPD.
10. Specify whether to enable continuous-channel IKE phase 1, with the
continuous-channel
command. The default setting is
no continuous-channel
,
which disables continuous-channel IKE phase 1. For more information on
continuous-channel see
Enabling continuous channel on page 585. For example:
11. Exit the peer context with the
exit
command. For example:
Configuring an ISAKMP peer-group
An ISAKMP peer-group maintains an ordered list of redundant peers. The purpose of the
peer-group is to provide a backup in the case of remote peer failure. At any point in time, only
one peer is active and acting as the remote peer. If the active peer is presumed dead, the next
peer in the peer-group becomes the active remote peer. For a full explanation of the
redundancy mechanism see
Introduction to the failover mechanism on page 605.
Note:
Note:
You can define up to 50 peer-groups.
Note:
Note:
A peer configured as
initiate mode none
cannot be a member of a
peer-group.
1. Use the
crypto isakmp peer-group
command, followed by the name of a
peer-group (a string of up to 110 characters), to enter the context of an ISAKMP
peer-group (and to create the peer-group if it does not exist). For example:
2. Use the
description
command to enter a description for the ISAKMP peer-group. For
example:
G350-001(config-peer:149.49.70.1)# continuous-channel
Done!
G350-001(config-peer:149.49.70.1)# exit
G350-001#
G350-001# crypto isakmp peer-group NY-VPN-group
G350-001(config-peer-grp:NY-VPN-group)#
G350-001(config-peer-grp:NY-VPN-group)# description “Avaya peer group”
Done!