Simultaneous Easy VPN Client and Server Support
Cisco Easy VPN Remote Phase Two more fully supports
configuring simultaneous Easy VPN Client and Cisco Easy VPN Server support on
the same Cisco 1700 series routers. You can configure one outside interface as a
Cisco Easy VPN Server and another outside interface on the same router as a
Cisco Easy VPN Client. Figure 12-12 shows an example of a router (Rtr2)
acting as both an Easy VPN Client and a Server.
The following example shows the configuration for the VPN client
and server features on Rtr2. Some lines were eliminated to conserve space:
Rtr2#show run
version 12.2
!
hostname Rtr2
!
aaa new-model
aaa authorization network vpn-client-grp local
aaa session-id common
!
ip subnet-zero
no ip domain-lookup
ip ssh time-out 120
ip ssh authentication-retries 3
!
crypto isakmp policy 10
authentication pre-share
group 2
crypto isakmp client configuration address-pool local loc-pool
!
crypto isakmp client configuration group vpn-server-grp
key vpn-grp-key
dns 192.168.0.13 192.168.0.15
wins 192.168.0.14 192.168.0.16
domain vpn-test.com
pool loc-pool
!
crypto ipsec transform-set trans-set-1 esp-3des esp-md5-hmac
!
crypto ipsec client ezvpn client1
connect auto
group vpn-client-grp key vpn-grp-key
mode client
peer 1.1.100.17 (Rtr1)
!
crypto dynamic-map dyn-map 1
set transform-set trans-set-1
!
crypto map dyn-map isakmp authorization list vpn-server-grp
crypto map dyn-map client configuration address respond
crypto map dyn-map 1 ipsec-isakmp dynamic dyn-map
!
interface FastEthernet0/0
description Connection to Branch Office - VPN Clients
ip address 5.0.0.1 255.0.0.0
crypto ipsec client ezvpn client1 inside
!
interface Serial0/0
description Connection to Corporate Network - VPN Server
ip address 1.0.0.1 255.0.0.0
no fair-queue
crypto ipsec client ezvpn client1
!
interface Serial0/1
description Connection to telecommuters - VPN Clients
ip address 1.2.0.1 255.255.0.0
crypto map dyn-map (for server functionality)
crypto ipsec client ezvpn client1 inside (for client functionality)
!
ip local pool loc-pool 1.2.0.3 1.2.0.31
ip classless
!
line con 0
line aux 0
line vty 0 4
end
Rtr2#
Cisco Easy VPN Remote Web Manager
Cisco Easy VPN Remote Phase Two introduced using the Cisco
Easy VPN Remote Web Manager to manage the Cisco uBR905 and Cisco uBR925 cable
access routers. The Cisco Easy VPN Remote Web Manager is a built-in
web-interface application resident on the uBR905 and uBR925 devices. The Web
Manager enables the user to avoid the command-line interface (CLI) to perform
the following functions:
-
See the current status of any Easy VPN Remote Phase Two
tunnels
-
Connect or disconnect a tunnel configured for manual
control
-
Reset a tunnel configured for automatic connection
-
Be prompted for Xauth information if Xauth information is
needed cp12Cisco VPN Firewall
Sections
Comments (0 posted)
Syndication
