The Cisco Easy VPN Server service allows a
growing number of Cisco IOS routers, PIX Firewalls, and Cisco VPN 3000
Concentrators to act as VPN head-end devices in site-to-site or remote access
VPNs. These head-end devices provide the VPN connections, as well as a
configuration source for the Cisco Easy VPN Remote sites. The Cisco Easy VPN
Server is available on numerous Cisco VPN routers, including Cisco UBR900, 1700,
2600, 3600, 7100, 7200, and 7500 series routers running Cisco IOS Release
12.2(8)T, Cisco PIX Firewalls, and all Cisco VPN 3000 Concentrators. Use the
Cisco online documentation to verify any new platforms supported because new
supported platforms have been added with each new release.
Basic feature configuration and security policies defined on the
head-end device are pushed to the remote VPN site before the connection is
established. This insures those connections have current configurations and
policies in place. In the case of the VPN 3002 Hardware Device, firmware updates
can be maintained using the same feature.
Cisco Easy VPN Server-enabled devices can provide VPN tunnel
termination for mobile remote workers running Cisco VPN client software,
allowing them to access the headquarters’ intranet.
Some of the benefits of the Cisco Easy VPN Server implementation
for rolling out remote VPN connections include the following:
Centrally stored configurations allow dynamic configuration
of end-user VPN connections and require less manual configuration by end users
and field technicians, reducing errors and additional service calls.
VPN security policy management can be centralized.
Supports large-scale, rapid deployments with minimal remote
When used with a remote VPN device, such as a router,
firewall, or VPN hardware client, this eliminates the need for end-user VPN
devices or client software.