网络设备配置实训教程教学课件作者谢尧王明昊课件教学资源pix7x-asa-client-stick课件.pdf

PIX/ASA 7.x and VPN Client for Public Internet VPN on a Stick Configuration Example Document ID: 67986 Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram Configurations Verify VPN Client Verification Troubleshoot NetPro Discussion Forums ? Featured Conversations Related Information Introduction This document describes how to set up a PIX Firewall 7.0.1 and later to perform IPsec on a stick. This setup applies to a specific case where the PIX does not allow split tunneling, and users connect directly to the PIX before they are permitted to go to the Internet. Note: In PIX version 7.2 and later, the intra?interface keyword allows all traffic to enter and exit the same interface, and not just IPsec traffic. Prerequisites Requirements Ensure that you meet these requirements before you attempt this configuration: The hub PIX Security Appliance needs to run version 7.0.1 or later? Cisco VPN Client version 4.x? Components Used The information in this document is based on the PIX or ASA security appliance version 7.0.1. The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. Conventions Refer to the Cisco Technical Tips Conventions for more information on document conventions. Cisco ? PIX/ASA 7.x and VPN Client for Public Internet VPN on a Stick Configuration Example Configure In this section, you are presented with the information to configure the features described in this document. Note: Use the Command Lookup Tool ( registered customers only) to obtain more information on the commands used in this section. Network Diagram This document uses this network setup: Configurations This document uses these configurations: PIX/ASA? VPN Client? PIX/ASA PIX Version 7.0(1) names ! inte