Avaya Media Gateway G250, Administration Manual

Page: 566 / 840

Configuring IPSec VPN
566 Administration for the Avaya G250 and Avaya G350 Media Gateways
3. Specify the remote peer, using the
set peer
command. For example:
Or
Specify a peer-group, using the
set peer-group
command. For example:
!
Important:
Important:
It is mandatory to specify either
set peer
or
set peer-group
, but not both.
4. Specify the specific transform-set to which this crypto map points, using the
set
transform-set
command.
!
Important:
Important:
set transform-set
is a mandatory command.
For example:
5. Set the static DSCP value in the
DS
field of the tunneled packet by using the
set dscp
command, followed by a value from 0 to 63. The default setting is
no set dscp
, which
specifies that the DSCP is copied from the
DS
field of the original packet.
For example:
6. Specify whether to enable continuous-channel IPSec (IKE phase 2) with the
continuous-channel
command. The default setting is
no continuous-channel
,
which disables continuous-channel IPSec. For more information on continuous-channel
see
Enabling continuous channel on page 585. For example:
7. Exit crypto map context with the
exit
command. For example:
G350-001(config-crypto:1)# set peer 149.49.60.60
Done!
G350-001(config-crypto:1)# set peer-group NY-VPN-group
Done!
G350-001(config-crypto:1)# set transform-set ts1
Done!
G350-001(config-crypto:1)# set dscp 38
Done!
G350-001(config-crypto:1)# continuous-channel
Done!
G350-001(config-crypto:1)# exit
G350-001#