Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring a site-to-site IPSec VPN5. Exit the peer context using the exit CLI command.G350-001(config-peer:149.49.70.1)# exitG350-001#Configuring crypto mapsA crypto map points to a transform-set and to a peer (which in turn points to an ISAKMP policy).These components define how to secure the traffic that matches the ip-rule that points to thiscrypto map.Important:! Important:It is mandatory to create at least one crypto map.Note:Note: You can configure up to 50 crypto maps.To configure a crypto map:1. Enter crypto map context and create a crypto map by using the crypto map CLIcommand.G350-001# crypto map 1G350-001(config-crypto:1)#2. Configure the following crypto map parameters:●●●●description: the description of the crypto mapset peer: the remote peerset transform set: the specific transform-set to which this crypto map pointsset dscp: the static DSCP value in the DS field of the tunneled packet. The defaultsetting is no set dscp, which specifies that the DSCP is copied from the DS field of theoriginal packet.Important:! Important:set peer and set transform set are mandatory parameters.G350-001(config-crypto:1)# description "vpn lincroft branch"Done!G350-001(config-crypto:1)# set peer 149.49.60.60Done!G350-001(config-crypto:1)# set transform-set ts1Done!G350-001(config-crypto:1)# set dscp 38Done!Issue 3 January 2005 213