Chapter 34 Configuring Easy Vpn Services On The Asa - Cisco PIX 500 Series Configuration Manual

Configuring Easy VPN Services on the ASA 5505
This chapter describes how to configure the ASA 5505 as an Easy VPN hardware client. This chapter
assumes you have configured the switch ports and VLAN interfaces of the ASA 5505 (see
"Configuring Switch Ports and VLAN Interfaces for the Cisco ASA 5505 Adaptive Security
Appliance").
The Easy VPN hardware client configuration specifies the IP address of its primary and secondary
Note
(backup) Easy VPN servers. Any ASA, including another ASA 5505 configured as a headend, a VPN
3000 Series Concentrator, an IOS-based router, or a firewall can act as an Easy VPN server. An ASA
5505 cannot, however function as both a client and a server simultaneously. To configure an ASA 5505
as a server, see
configure the ASA 5505 as you would any other ASA, beginning with the
page 2-1
This chapter includes the following sections:
Specifying the Client/Server Role of the Cisco ASA 5505, page 34-2
•
Specifying the Primary and Secondary Servers, page 34-3
•
Specifying the Mode, page 34-3
•
Configuring Automatic Xauth Authentication, page 34-4
•
• Configuring IPSec Over TCP, page 34-4
• Comparing Tunneling Options, page 34-5
Specifying the Tunnel Group or Trustpoint, page 34-6
•
Configuring Split Tunneling, page 34-8
•
Configuring Device Pass-Through, page 34-8
•
Configuring Remote Management, page 34-9
•
Guidelines for Configuring the Easy VPN Server, page 34-9
•
OL-12172-03
"Specifying the Client/Server Role of the Cisco ASA 5505" section on page
of this guide.
C H A P T E R
Cisco Security Appliance Command Line Configuration Guide
34
Chapter 4,
34-2. Then
"Getting Started" section on
34-1