© 2006 Cisco Systems, Inc. All rights reserved.SND v2.06-1 Building Cisco IPsec VPNs Building Remote Access VPNs. - презентация

1 © 2006 Cisco Systems, Inc. All rights reserved.SND v Building Cisco IPsec VPNs Building Remote Access VPNs

2 © 2006 Cisco Systems, Inc. All rights reserved.SND v Outline Overview Cisco Easy VPN Configuring Cisco Easy VPN Server Managing Cisco Easy VPN Server Connections Configuring Cisco Easy VPN Remote Summary

3 © 2006 Cisco Systems, Inc. All rights reserved.SND v Cisco Easy VPN Components Cisco Easy VPN Server enables Cisco IOS routers, Cisco PIX Security Appliances, and Cisco VPN 3000 Series Concentrators to act as VPN headend devices in site-to-site or remote-access VPNs. In this configuration, remote office devices use the Cisco Easy VPN Remote feature. Cisco Easy VPN Remote enables Cisco IOS routers, Cisco PIX Security Appliances, and Cisco VPN 3002 Hardware Clients or software clients to act as remote VPN clients.

4 © 2006 Cisco Systems, Inc. All rights reserved.SND v Remote Access Using Cisco Easy VPN PC with Cisco Easy VPN Remote Client 4. x Cisco 800 Series Router Cisco uBR 900 Series Cable Access Router Cisco 1700 Series Integrated Services Router Cisco VPN 3002 Hardware Client Cisco PIX 501 Security Appliance Cisco IOS Release 12.3(11)T (or later) Easy VPN Server

5 © 2006 Cisco Systems, Inc. All rights reserved.SND v Cisco Easy VPN Remote Connection Process 1. Device authentication via ISAKMP 2. User authentication using IKE XAUTH 3. VPN policy push (using mode configuration) 4. IPsec Security Association creation

6 © 2006 Cisco Systems, Inc. All rights reserved.SND v Cisco Easy VPN Server Configuration Tasks for the Cisco Easy VPN Server Wizard The Cisco Easy VPN Server Wizard includes these tasks: Choosing the interface on which to terminate IPsec IKE policies Group policy lookup method User authentication Local group policies IPsec transform set

7 © 2006 Cisco Systems, Inc. All rights reserved.SND v Starting the Cisco Easy VPN Server Wizard 1 2

8 © 2006 Cisco Systems, Inc. All rights reserved.SND v Choosing an Interface for Terminating IPsec 3

9 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring IKE Policies 4

10 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring IPsec Transform Sets 5

11 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring a Group Policy Configuration Location: Local Router Configuration 6a

12 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring a Group Policy Configuration Location: External Location via RADIUS i iiiii 6b

13 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring a Local User Database: User Authentication i ii 7a

14 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring Local Group Policies 8

15 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring Local Group Policy Parameters

16 © 2006 Cisco Systems, Inc. All rights reserved.SND v Confirming Configuration Settings

17 © 2006 Cisco Systems, Inc. All rights reserved.SND v Testing the Cisco Easy VPN Server Configuration 1 2 3

18 © 2006 Cisco Systems, Inc. All rights reserved.SND v Managing Cisco Easy VPN Server Connections

19 © 2006 Cisco Systems, Inc. All rights reserved.SND v Managing Cisco Easy VPN Server Connections (Cont.) Add Easy VPN ServerEdit Easy VPN Server

20 © 2006 Cisco Systems, Inc. All rights reserved.SND v Editing, Cloning, or Deleting Group Policies

21 © 2006 Cisco Systems, Inc. All rights reserved.SND v Creating or Editing a Local Pool for IP Addresses

22 © 2006 Cisco Systems, Inc. All rights reserved.SND v Cisco VPN Client Software

23 © 2006 Cisco Systems, Inc. All rights reserved.SND v Configuring Cisco Easy VPN Remote

24 © 2006 Cisco Systems, Inc. All rights reserved.SND v Managing Cisco Easy VPN Remote Connections

25 © 2006 Cisco Systems, Inc. All rights reserved.SND v Summary Cisco Easy VPN consists of two components: Cisco Easy VPN Server and Cisco Easy VPN Remote. The Cisco Easy VPN Server Wizard easily configures the Cisco SDM Easy VPN Server. The Cisco SDM GUI manages Cisco Easy VPN Server connections. The Cisco Easy VPN Remote Wizard easily configures Cisco SDM Easy VPN Remote.

26 © 2006 Cisco Systems, Inc. All rights reserved.SND v