Advertisement
What to Do Next
You have just configured the local security appliance. Now you need to configure the security
appliance at the remote site.
At the remote site, configure the second security appliance to serve as a VPN peer. Use the procedure
you used to configure the local security appliance, starting at Step 1: Configure the PIX security
appliance at the first site on page 19, and finishing with Step 7: View VPN Attributes and Complete
Wizard on page 26.
When configuring PIX 2, enter the exact same values for each of the options that you selected
Note
for PIX 1. Mismatches are a common cause of VPN configuration failures.
5
Optional Maintenance and Upgrade Procedures
Obtaining DES and 3DES/AES Encryption Licenses
The security appliance offers the option to purchase a DES or 3DES-AES license to enable specific
features that provide encryption technology, such as secure remote management (SSH, ASDM, and so
on), site-to-site VPN, and remote access VPN. Enabling the license requires an encryption license key.
If you ordered your security appliance with a DES or 3DES-AES license, the encryption license key
comes with the security appliance.
If you did not order your security appliance with a DES or 3DES-AES license and would like to
purchase one now, the encryption licenses are available at no charge on
If you are a registered user of Cisco.com and would like to obtain a DES or 3DES/AES encryption
license, go to the following website:
http://www.cisco.com/cgi-bin/Software/FormManager/formgenerator.pl
If you are not a registered user of Cisco.com, go to the following website:
http://www.cisco.com/pcgi-bin/Software/FormManager/formgenerator.pl
Provide your name, e-mail address, and the serial number for the security appliance as it appears in
the show version command output.
You will receive the new activation key for your security appliance within two hours (or less)
Note
on requesting the license upgrade.
Cisco.com.
27
Advertisement
