Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring IPSec VPNConfiguring a site-to-site IPSec VPNTo configure a site-to-site IPSec VPN, two devices (the G350 and a peer Gateway) must beconfigured symmetrically. The following sections provide an overview of IPSec VPNconfiguration, followed by detailed step-by-step instructions.Overview of IPSec VPN configurationThe basic IPSec VPN building blocks define how to secure packets, as follows:●ISAKMP policies – define parameters for IKE phase 1 negotiation● Transform-sets – define parameters for IKE phase 2 negotiationOnce the building blocks are defined, IPSec VPN is implemented using a crypto-list. Thecrypto-list defines, for the interface it which it applies, which packets should be secured andhow, as follows:Each rule in the crypto-list points to a crypto-map. A crypto-map points to a transform-set, andto a peer. The peer, in turn, points to an ISAKMP policy.The following diagram illustrates IPSec VPN components and their relationships:204 Administration of the Avaya G350 Media Gateway