Administration of the Avaya G350 Media Gateway - Avaya Support

Administration procedures33. Remove unnecessary VPN peers.●Use the show crypto isakmp key command to list all defined pre-shared keys.● Use the no crypto isakmp key command to delete unnecessary VPN peers.34. Configure VPN peers (pre-shared keys).● Use the crypto isakmp key command to define new VPN peers or assign a newpre-shared key to existing peers.G350-N(super)# crypto isakmp policy 1G350-N(isakmp-1)# encryption desG350-N(isakmp-1)# hash shaG350-N(isakmp-1)# group 2exitcrypto isakmp key preshared_key1 address 10.0.0.2 isakmp-policy 1crypto isakmp key preshared_key2 address 1.0.0.2 isakmp-policy 135. Configure IPSec transfer-sets:●●HMAC-SHA-1AES● 3DES (or DES for interconnection with legacy systems)Use the crypto ipsec transform-set command.crypto ipsec transform-set ts1 esp-3des esp-sha-hmacexitcrypto map 1G350-N(super)# set transform-set ts1G350-N(crypto-map)# set peer 10.0.0.2Done!G350-N(crypto-map)# exitG350-N(super)# crypto map 2G350-N(crypto-map)# set transform-set ts1G350-N(crypto-map)# set peer 1.0.0.2Done!G350-N(crypto-map)# exit36. Define one or more IPSec Crypto lists that provide encryption rules for traffic that needsprotection. Make sure that packets with IP source address of any of the G350 interfaces forthe following protocols are always encrypted:●●●TELNETFTPTFTP● SNMPUse the ip crypto-list list-id command.Issue 3 January 2005 317