Administration of the Avaya G350 Media Gateway - Avaya Support

Chapter 17: Configuring IPSec VPNThis chapter provides information about configuring IPSec VPN in the G350, and contains thefollowing sections:●●●●Overview of IPSec VPN — an overview of VPN and IPSec technologyConfiguring a site-to-site IPSec VPN — instructions on how to configure IPSec VPN in theG350IPSec VPN maintenance — instructions on displaying and clearing IPSec VPN data, aswell as viewing the IPSec VPN logTypical installations — illustrations of IPSec VPN typical applicationsOverview of IPSec VPNVPN (Virtual Private Network) defines a private secure connection between two nodes on apublic network such as the Internet. VPN at the IP level is deployed using IPSec. IPSec (IPSecurity) is a standards-based set of protocols defined by the IETF that provide privacy,integrity, and authenticity to information transferred across IP networks.The standard key exchange method employed by IPSec uses the IKE (Internet Key Exchange)protocol to exchange key information between the two nodes (called peers). Each peermaintains SAs (security associations) to maintain the private secure connection. IKE operatesin two phases: the Phase-1 exchange negotiates an IKE SA. The IKE SA created in Phase-1secures the subsequent Phase-2 exchanges, which in turn generate IPSec SAs. IPSec SAssecure the actual traffic between the protected networks behind the peers, while the IKE SAonly secures the key exchanges that generate the IPSec SAs between the peers.The G350 IPSec VPN feature is designed to support site-to-site topologies, in which the twopeers are Gateways.Issue 3 January 2005 203