Cisco QuickVPN - PC Administration Manual page 167

Configuring VPN
Advanced Configuration of IPSec VPN
STEP 2
STEP 3
Cisco SA 500 Series Security Appliances Administration Guide
• List of back up Policies: This table lists all the policies that are configured
as a backup policy. These policies are created when you create a new IKE
policy and select the Enable Redundant Gateway option. The policy comes
into effect only if the primary policy fails. You cannot enable, disable, edit, or
delete the backup policies from this table. You can only take actions on the
primary policy, by using the buttons in the List of VPN Policies table.
To add a VPN policy, click Add.
Other options: Click the Edit button to edit an entry. To delete an entry, check
NOTE
the box and then click Delete. To select all entries, check the box in the first
column of the table heading.
After you click Add or Edit, the VPN Policy Configuration page appears.
In the General area, enter the following information:
• Policy Name: Enter a unique name to identify the policy.
• Policy Type: Choose one of the following types:
- Auto: Some parameters for the VPN tunnel are generated automatically.
The IKE (Internet Key Exchange) protocol is used to perform negotiations
between the two VPN endpoints. To create an Auto VPN Policy, you need
to first create an IKE policy and then add the corresponding Auto Policy
for that IKE Policy.
- Manual: All settings (including the keys) for the VPN tunnel are manually
input for each end point. No third party server or organization is involved.
• Select Local Gateway: If you configured the Optional Port for use as a WAN
port, choose which WAN interface will act as one end of the tunnel:
Dedicated WAN or Optional WAN.
• Remote End Point: Choose to identify the remote end point by the IP
address or the Internet Name/FQDN of the remote gateway or the client PC.
Also enter the IP address or the Internet Name/FQDN in the field below the
drop-down list.
• Enable NetBIOS: Check this box to enable NetBIOS, which is a program that
carries out name resolution. This option allows NetBIOS broadcasts to travel
over the VPN tunnel.
8
167