Cisco ASA 5505 Getting Started Manual page 19

Chapter 2 Deployment Planning
Figure 2-7 ASA 5505 Installed as VPN Hardware Client
VPN Headend
Central LAN
78-18003-02
Hosts at remote sites no longer have to run VPN client software.
•
Security policies reside on a central server and are pushed to the remote
•
hardware clients when a VPN connection is established.
Few configuration parameters need to be set locally, minimizing the need for
•
on-site administration.
Figure 2-7 illustrates how the different Easy VPN components can be deployed.
Push remote
configuration
ISP
Router
Device
PO Cis
48 WE R co
VD C AS A SS
C-0
5
7 Sta tus
POW Sec
ER ove uri ty
r ETH Ser vic
ERN ET es
6 Ca rd
Slo t
5
4
3
2
co ns
1 ole
0
1
2 ASA 5500 series
RE SE
T
Cisco IOS router
with IPSec support
For information about how to configure the ASA 5505 as a VPN hardware client,
see Chapter 11, "Scenario: Easy VPN Hardware Client Configuration."
VPN Hardware
Client
ISP
PO WE Cis
48 VD R co AS
C A SS
C-0
5
Sta
7 tus Sec
POW ER uri
ove r ETH Ser ty
ERN vic
ET 6 Ca es
rd Slo
5 t
router 4
2
1
0
ASA 5505
Internet
ASA 5505 Getting Started Guide
Scenario 6: Easy VPN Hardware Client
co ns
ole
1
2
RE
SE
T
2-9