Ip firewall fast-nat-failover

The Internet as an Alternative	Internet-based WAN Backup Solutions using NetVanta

!If using the PPPoE and Dial-up ISP connections for local Internet access

!and using 'NAT source' with the address of the currently active interface, the

!previous command is necessary to allow sessions started on one interface to be

!terminated when the route to the destination switches to the other interface.

ip crypto

crypto ike policy 100 initiate aggressive no respond

local-id fqdn REMOTE peer 10.254.255.85 attribute 10 authentication pre-share group 2

lifetime 300

crypto ike remote-id fqdn CENTRAL. preshared-key 1234567890

crypto ipsec transform-set dessha esp-des esp-sha-hmac mode tunnel

!separate crypto maps are used to allow for future customization of

!individual VPN connections if needed

crypto map HOSTviaDIAL 100 ipsec-ike match address REMOTE_to_CENTRAL set peer 10.254.255.85

set transform-set dessha

set security-association lifetime seconds 600 set pfs group2

crypto map HOSTviaPoE 100 ipsec-ike match address REMOTE_to_CENTRAL set peer 10.254.255.85

set transform-set dessha

set security-association lifetime seconds 600 set pfs group2

interface eth 0/1

description Local Lan Interface

ip address 10.1.1.254 255.255.255.240 access-policy LOCALLAN

61200890L1-29.4A

ADTRAN Internet-Based WAN Backup manual Ip firewall fast-nat-failover