Avaya Media Gateway G250, Administration Manual

Page: 565 / 840

Configuring a site-to-site IPSec VPN
Issue 5 June 2008 565
3. Add a peer to the list of peers in the group, using the
set peer
command:
●
Specify the peer’s name or address.
●
Optionally enter an index number, specifying the relative position of the peer within the
peer-group. If you do not enter an index number, the peer is added at the end of the
peer-group list, and is assigned an index following the last peer’s index.
For example:
4. Repeat Step 3 for every peer you want to add to the list.
Note:
Note:
You can define up to a maximum of five peers in a peer-group.
!
Important:
Important:
Each of the peers listed in the peer-group must be configured as an ISAKMP peer
(see
Configuring ISAKMP peer information on page 561).
Configuring crypto maps
A crypto map points to a transform-set and to a peer (which in turn points to an ISAKMP policy).
If you defined a peer-group, the crypto map can point to the peer-group.
The transform-set and ISAKMP policy define how to secure the traffic that matches the ip-rule
that points to this crypto map.
!
Important:
Important:
It is mandatory to create at least one crypto map.
Note:
Note:
You can configure up to 100 crypto maps.
1. Use the
crypto map
command, followed by an index number from
1
to
50
, to enter the
context of a crypto map (and to create the crypto map if it does not exist). For example:
2. Use the
description
command to enter a description for the crypto map. For example:
G350-001(config-peer-grp:NY-VPN-group)# set peer 149.49.52.135 1
Done!
G350-001# crypto map 1
G350-001(config-crypto:1)#
G350-001(config-crypto:1)# description "vpn lincroft branch"
Done!