Add Or Edit Easy Vpn Remote: Interfaces And Connections - Cisco OL-4015-08 User Manual

Edit Easy VPN Remote
Caution

Add or Edit Easy VPN Remote: Interfaces and Connections

Inside Interfaces
Cisco Router and Security Device Manager Version 2.2 User's Guide
9-100
The information is saved in the router configuration file and used each time
the tunnel is established.
Storing the XAuth username and password in router memory creates a security
risk because anyone who has access to the router configuration can obtain this
information. If you do not want this information stored on the router, do not enter
it here. The Easy VPN server will simply challenge the router for the username
and password each time the connection is established. Also, SDM cannot itself
determine whether the server allows passwords to be saved. You must determine
whether the server allows this option. If the server does not allow passwords to be
saved, you should not create a security risk by entering the information here.
In this window you can set the inside and outside interfaces, and specify how the
tunnel is brought up.
Choose the inside (LAN) interface to associate with this Easy VPN configuration.
You can choose multiple inside interfaces, with the following restrictions:
If you choose interfaces that are already used in another Easy VPN
•
configuration, you are notified that an interface cannot be part of two Easy
VPN configurations.
If you choose interfaces that are already used in a standard VPN
•
configuration, you are notified that the Easy VPN configuration you are
creating cannot coexist with the existing VPN configuration. SDM will ask if
you want to remove the existing VPN tunnels from those interfaces and apply
the Easy VPN configuration to them.
An existing interface does not appear in the list of interfaces if it cannot be
•
used in an Easy VPN configuration. For example, loopback interfaces
configured on the router do not appear in this list.
An interface cannot be designated as both an inside and an outside interface.
•
Up to three inside interfaces are supported on Cisco 800 and Cisco 1700 series
routers. You can remove interfaces from an Easy VPN configuration in the Edit
Easy VPN Remote window.
Chapter 9 Easy VPN Remote
OL-4015-08