Administration of the Avaya G350 Media Gateway - Avaya Support

FIPSG350-N(super)# ip crypto-list 901G350-N(crypto-list-901)# local-address 10.0.0.1Done!G350-N(crypto-list-901)# ip-rule 10Done!G350-N(crypto-list-901)# protect crypto map 1Done!G350-N(crypto-list-901)# source-ip anyDonw!G350-N(crypto-list-901)# destination-ip anyDone!exitexitG350-N(super)# ip crypto-list 902G350-N(crypto-list-902)# local-address 1.0.0.1Done!G350-N(crypto-list-902)# ip-rule 10Done!G350-N(crypto-list-902)# protect crypto map 2Done!G350-N(crypto-list-902)# source-ip anyDone!G350-N(crypto-list-902)# destination-ip anyDone!exitNote:Note:TELNET, FTP, TFTP, and SNMP are always ESP with TDES- or AES- encrypted.Null encryption or AH are NOT allowed for such flows.37. Activate the crypto-lists on the inbound direction of all cipher-text interfaces. For flows thatneed to be encrypted even if directed to clear-text interfaces, apply crypto lists to allinterfaces.●Use the ip crypto-list list-id command in the interface context.G350-N(super)# interface serial 2/1:1G350-N(if: serial 2/1)# ip crypto-group 902Done!G350-N(if: serial 2/1)# exitG350-N(super)# interface FastEthernet 10/2G350-N(if:fastEthernet 10/2)# ip crypto-group 901Done!G350-N(if:fastEthernet 10/2)# exit38. Save the running config to the startup config.● Use the copy running-config startup-config command twice to ensure thatconfiguration primary and backup both are being updated with approved modeconfiguration.39. Re-connect network interfaces.318 Administration of the Avaya G350 Media Gateway