Administration of the Avaya G350 Media Gateway - Avaya Support

Typical installations●4. Allowed ICMP from anyone to local tunnel endpoint -> Permit5. Default -> DenyEgress:1. IKE (UDP/500) from local tunnel endpoint to remote tunnel endpoint -> Permit2. Local GRE tunnel endpoint to remote GRE tunnel endpoint -> Permit3. All allowed services from any local subnet to anyone -> Permit4. Allowed ICMP from local tunnel endpoint to anyone -> Permit5. Default -> DenyPolicy Based Routing (PBR) is configured as follows, on VoIP VLAN and loopbackinterfaces:●●Destination IP = local subnets -> Route: DBRDSCP = bearer -> Route: WAN● DSCP = control -> Route: 1. WAN 2. DBR2. Configure the VPN Hub (Main Office) as follows:● The VPN policy portion for the branch is configured as a mirror image of the branch.● The ACL portion for the branch is a mirror image of the branch, with some minormodifications.●●●Static routing is configured as follows:Branch subnets -> Internet interface.Policy Based Routing (PBR) portion for the branch is configured as follows, on mostinterfaces:● Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = bearer ->Route: WAN● Destination IP = branch VoIP subnet(s) or GW address (PMI), DSCP = control ->Route: 1. WAN 2. DBRACM is configured to route voice calls through PSTN when the main VoIP trunk is down.Issue 3 January 2005 247