Cisco QuickVPN - PC Administration Manual page 171

Configuring VPN
Advanced Configuration of IPSec VPN
STEP 8
NOTE
STEP 1
STEP 2
STEP 3
Cisco SA 500 Series Security Appliances Administration Guide
• Failback time to switch from back-up to primary: Enter the number of
seconds that must pass to confirm that primary tunnel has recovered from a
failure. If the primary tunnel is up for the specified number of seconds, the
security appliance will switch to the primary tunnel by disabling the backup
tunnel.
Click Apply to save your settings, or click Reset to revert to the saved settings.
Next steps:
• To view the status of the VPN tunnels, click Status in the menu bar, and then
click VPN Status > IPSec Status in the navigation tree. For more
information, see
• To view IPSec VPN logs, click Status in the menu bar, and then click View
Logs > IPSec VPN Logs in the navigation tree. For more information, see
IPSec VPN Logs, page
• To configure IPSec passthrough, click IPSec > Passthrough. For more
information, see
• To add the users for remote access VPN, see
Database for the IPSec Remote Access VPN, page
• If you enabled rollover, be sure to configure Dynamic DNS. See
DNS, page 91.
Configuring IPSec Passthrough
You need to configure IPSec passthrough if there are devices behind the security
appliance that need to set up IPSec tunnels independently, for example, to
connect to another router on the WAN.
Click VPN on the menu bar, and then click IPSec > Passthrough in the navigation
tree.
The Passthrough page appears.
Check the box for each type of traffic that you want to allow to pass through the
VPN tunnel.
Click Apply to save your settings, or click Reset to revert to the saved settings.
IPSec VPN Connection Status, page
47.
Configuring IPSec Passthrough, page
43.
171.
Configuring the User
159.
Dynamic
8
171