Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring IPSec VPNPrerequisite – coordinating with the VPN peerBefore commencing IPSec VPN configuration, you must resolve jointly with your VPN peer thebasic parameters so that IPSec VPN can be set up symmetrically in the two peers. If the IPSecVPN configuration in the two peers does not match, no VPN is created. The basic parametersinclude:●●The IKE phase 1 parameters (as defined in the ISAKMP policy, see Configuring ISAKMPpolicies on page 209)The IKE phase 2 parameters (as defined in the transform-set, see Configuringtransform-sets on page 210)● The pre-shared key (see Configuring ISAKMP peer information on page 211)●Which packets should be secured (as defined in the crypto-list, see Configuringcrypto-lists on page 214)● The peer addresses – for each peer, the local address entered in the crypto-list (seeConfiguring crypto-lists on page 214) should match the ISAKMP peer address in the otherpeer (see Configuring ISAKMP peer information on page 211).See IPSec VPN logging on page 219 for information on how to view IPSec VPN configuration inboth peers so as to pinpoint the problem in case of a mismatch between the two peers.Installing the VPN license fileTo enable IPSec VPN you must obtain and install a VPN license. To obtain a VPN license,please contact your Avaya representative.You can install the VPN license via any of the following:● FTP● TFTP● SCPNote:Note:You must have admin permissions to install a VPN license.208 Administration of the Avaya G350 Media Gateway