Cisco ASA 5505 Getting Started Manual page 149

Chapter 10 Scenario: Site-to-Site VPN Configuration
Specifying Hosts and Networks
Step 1
Step 2
Step 3
78-18003-02
Identify hosts and networks at the local site that are permitted to use this IPsec
tunnel to communicate with hosts and networks on the other side of the tunnel.
Specify hosts and networks that are permitted access to the tunnel by clicking
Add or Delete. In the current scenario, traffic from Network A (10.10.10.0) is
encrypted by Security Appliance 1 and transmitted through the VPN tunnel.
In addition, identify hosts and networks at the remote site to be allowed to use this
IPsec tunnel to access local hosts and networks. Add or remove hosts and
networks dynamically by clicking Add or Delete respectively. In this scenario,
for Security Appliance 1, the remote network is Network B (10.20.20.0), so
traffic encrypted from this network is permitted through the tunnel.
In Step 5 of the VPN Wizard, perform the following steps:
In the Action area, click the Protect radio button or Do Not Protect radio button.
Enter the IP address of local networks to be protected or not protected, or click
the ellipsis (...) button to select from a list of hosts and networks.
Enter the IP address of remote networks to be protected or not protected, or click
the ellipsis (...) button to select from a list of hosts and networks.
Implementing the Site-to-Site Scenario
ASA 5505 Getting Started Guide
10-11