Avaya BSGx4e CLI User's Guide download pdf (Page 58)

IP security commands 3 Configuration commands

58 NN47928-107

ipsec policy

An IPsec policy specifies the two secure networks that a VPN tunnel

connects and the security parameters used to encrypt and decrypt traffic

between the two networks.

The configuration of an IPsec policy also allows an IP interface to be

configured for the policy. The following are required for an IPSec policy to

bring up a successful VPN tunnel:

z A preshared key must be defined for the remote secure gateway. The

gateway parameter of the policy must match the peer of a preshared key

record. The same preshared key value must be configured at the remote

secure gateway.

z The VPN interface must be assigned an IP address.

z A route must send traffic to the VPN interface.

z A firewall policy must allow ESP traffic from the remote secure gateway.

(IP packets sent from the remote secure network to the local secure

network are encrypted as ESP packets.)

z A firewall policy must allow IP packets sent from the local secure

network to the remote secure network. Otherwise, ESP packets cannot

be routed to the remote secure gateway.

Use this command to configure an IPsec policy between a local subnet and

a remote subnet.

Syntax config ipsec policy <name> gateway <hostname|ip address> local

<ip address> remote <ip address> prop <proposal>

Parameters name Enter a name for this VPN.

gateway hostname|ip address

Enter a Host name or fixed IP address of the

remote secure gateway.

local ip address Enter a local IP address secured by the VPN.

Valid values include any or addresses specified

as a range or as a subnet.

remote ip address Enter a remote IP address secured by the VPN.

Valid values include any or addresses specified

as a range or as a subnet.

prop proposal Enter the name of the IPsec proposal. The

default value is vpn-a.

Example The following command configures a policy that secures all traffic between

the BSGX4e and the gateway 172.28.16.20.

> config ipsec policy alltraffic gateway 172.28.16.20 local

any remote any prop VPN-A

commands

del ipsec policy

display ipsec policy

show ipsec policy

clear protocol esp

show protocol esp

1 2 ... 53 54 55 56 57 58 59 60 61 62 63 ... 183 184

Comments to this Manuals

No comments

Avaya BSGx4e CLI User's Guide Page 58

Comments to this Manuals