Cisco SR520-FE-K9 Administration Manual page 193

Configuring VPN
Cisco VPN Server
Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models)
Cisco VPN Server Settings
IKE Phase 2P
PFS Group
SA Lifetime
Mode Configuration
IP Pool
DNS1
DNS2
WINS1
WINS2
Banner
Diffie-Hellman group options for Perfect Forward
Secrecy (PFS) in phase 2. Choices are: 1 [modp 768], 2
[modp 1024], 5 [modp 1536], 14 [modp 2048], or
15 [modp 3072].
Defines how long an IPSec SA (security association) will
be used. The default is 30 minutes.
Starting IP Address: Starting IP address of the range of
addresses that are assigned to the remote client. This
range must not be in the same subnet as any VLAN.
Subnet Mask: Mask for the address range assigned to
remote clients. The defined mask must be large enough
to accommodate the maximum number of connections
supported by your SRP.
Primary DNS server to be used by remote clients.
Secondary DNS server to be used by remote clients.
Primary WINS server to be used by remote clients.
Secondary WINS server to be used by remote clients
Message displayed to the remote user after they log on.
The banner allows up to 500 printable ASCII characters
on 1 line.
7
193