Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring IPSec VPN3. Allowed ICMP from anyone to local tunnel endpoint -> Permit4. Default -> DenyEgress:1. IKE (UDP/500) from local tunnel endpoint to remote tunnel endpoint -> Permit2. All allowed services from any local subnet to anyone -> Permit3. Allowed ICMP from local tunnel endpoint to anyone -> Permit4. Default -> Deny● Dynamic routing (OSPF or RIP) is configured to run over local data interfaces (dataVLANs) and on the GRE interfaces.2. Configure the VPN Hubs (Main Offices) as follows:● The VPN policy portion for the branch is configured as a mirror image of the branch.● The ACL portion for the branch is a mirror image of the branch, with some minormodifications.●●The GRE tunnel interface is configured for the branch.Dynamic routing (OSPF or RIP) is configured to run over the GRE interface to thebranch.240 Administration of the Avaya G350 Media Gateway