Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring IPSec VPNInterface vlan 1.1ip-address pmiicc-vlanexitInterface vlan 1.2ip-address exitInterface FastEthernet 10/2encapsulation PPPoEtraffic-shape rate 256000ip Addressip crypto-group 901ip acl-group in 301ip acl-group out 302exitip default-gateway FastEthernet 10/2 highHub-and-spoke with hub redundancy/load sharingA branch with a G350 can connect to two VPN Hub sites, in a way that will provide eitherredundancy or load sharing.In this topology, the G350 is connected through its 10/100 WAN Ethernet port to a DSL modem.● Two GRE tunnel interfaces are defined:● GRE1 that leads to a Primary Main Office GRE End Point behind the VPN Hub Gateway● GRE2 that leads to a Backup Main Office GRE End Point behind the VPN Hub Gateway● Two VPNs are defined.● Connectivity to the networks in Primary/Backup Main Office is determined through GREkeep alives. If network connectivity is lost due to failures in the WAN, in the Primary MainOffice, the GRE keep-alive will fail and the GRE interface will transition to a “down” state.The two GRE tunnels can then be used for branch to Primary/Backup Main Office in eitherRedundancy or Load sharing mode:● Redundancy – GRE2 is configured as a backup interface for GRE1, and is activated onlywhen GRE1 is in the “down” state.● Load sharing – Both tunnel interfaces are active. Routing protocols (RIP or OSPF) routetraffic to destinations based on route cost & availability, as follows:For two routes of equal cost to the same destination, one through Primary Main Office andone through Backup Main Office, OSPF will automatically distribute traffic through bothroutes, effectively sharing load between routes.238 Administration of the Avaya G350 Media Gateway