Configuring Ipsec Remote-Access Connection Profile Ipsec Attributes - Cisco PIX 500 Series Configuration Manual

Configuring Connection Profiles
3.
4.
To implement this procedure, do the following steps:
Configure Interfaces:
Step 1
interface GigabitEthernet0/0
interface GigabitEthernet0/1
Configure an 'ipv6 local pool' (used for IPv6 address assignment):
Step 2
ipv6 local pool ipv6pool 2001:DB8:1:1::5/32 100
Note
Step 3 Add the ipv6 address pool to your tunnel group policy (or group-policy):
tunnel-group YourTunGrp1 general-attributes
Note
Configure an IPv6 tunnel default gateway:
Step 4
ipv6 route inside ::/0 X:X:X:X::X tunneled

Configuring IPSec Remote-Access Connection Profile IPSec Attributes

To configure the IPSec attributes for a remote-access connection profile, do the following steps. The
following description assumes that you have already created the IPSec remote-access connection profile.
IPSec remote-access connection profiles have more attributes than IPSec LAN-to-LAN connection
profiles:
Step 1 To specify the attributes of an IPSec remote-access tunnel-group, enter tunnel-group ipsec-attributes
mode by entering the following command. The prompt changes to indicate the mode change:
hostname(config)# tunnel-group tunnel-group-name ipsec-attributes
hostname(config-tunnel-ipsec)#
Cisco Security Appliance Command Line Configuration Guide
30-12
Configure an IPv6 address local pool for client assigned IP Addresses.
Configure an IPv6 tunnel default gateway.
nameif outside
security-level 0
ip address 192.168.0.1 255.255.255.0
ipv6 enable ; Needed for IPv6.
!
nameif inside
security-level 100
ip address 10.10.0.1 255.255.0.0
ipv6 address 2001:DB8::1/32
ipv6 enable ; Needed for IPv6.
You still need to configure an IPv4 address pool when using IPv6 (using the ip local pool
command)
Again, you must also configure an IPv4 address pool here as well (using the 'address-pool'
command).
Chapter 30 Configuring Connection Profiles, Group Policies, and Users
; Needed for IPv6.
; Use your IPv6 prefix here
ipv6-address-pool ipv6pool
OL-12172-03