Avaya Media Gateway G250, Administration Manual

Page: 635 / 840

Summary of VPN commands
Issue 5 June 2008 635
interface
(fastethernet|
dialer|serial|
vlan)
Enter the
FastEthernet
,
Dialer
,
Serial
, or
VLAN
interface context
crypto ipsec
df-bit
Set the Don’t-Fragment bit to clear
mode or copy mode
crypto ipsec
minimal-pmtu
Set the minimal PMTU value that
can be applied to an SA when the
G250/G350 participates in PMTUD
for the tunnel pertaining to that SA
ip
crypto-group
Activate a crypto list in the context
of the interface on which the crypto
list is activated
ip crypto-list
Enter crypto list context and create
or edit a crypto list
ip-rule
Enter ip-rule context and create or
modify a specific rule
description
Enter a description for the ip-rule in
the ip crypto list
destination-
ip
Specify the destination IP address
of packets to which the current rule
applies
protect
crypto map
Protect traffic that matches this
rule by applying the IPSec
processing configured by the
specific crypto map
source-ip
Indicate that the current rule
applies to packets from the
specified source IP address
local-address
Set the local IP address for the
IPSec tunnels derived from this
crypto list
show crypto ipsec
sa
Display the IPSec SA database
and related runtime, statistical, and
configuration information
Table 145: VPN CLI commands (continued)
Root level command First level
command Second level
command Description
4 of 5