网络设备配置实训教程教学课件作者谢尧王明昊课件教学资源PIXASA7.xasaRemoteVPNServer课件.doc

PIX/ASA 7.x as a Remote VPN Server Complete these steps to configure the Cisco ASA as a remote VPN server using ASDM. Select Wizards VPN Wizard from the Home window. Select the Remote Access VPN tunnel type and ensure that the VPN Tunnel Interface is set as desired. The only VPN Client Type available is already selected. Click Next. Enter a name for the Tunnel Group Name. Supply the authentication information to use. Pre-shared Key is selected in this example. Choose whether you want remote users to be authenticated to the local user database or to an external AAA server group. Note:?You add users to the local user database in step 6. Note:?Refer to Authentication and Authorization Server Groups for VPN Users via ASDM Configuration Example for how to configure an external AAA server group via ASDM. Add users to the local database if necessary. Note:?Do not remove existing users from this window. Select Configuration Device Administration Administration User Accounts in the main ASDM window to edit existing entries in the database or to remove them from the database. Define a pool of local addresses to be dynamically assigned to remote VPN Clients when they connect. Optional: Specify the DNS and WINS server information and a Default Domain Name to be pushed to remote VPN Clients. Specify the parameters for IKE, also known as IKE Phase 1. Configurations on both sides of the tunnel must match exactly. However, the Cisco VPN Client automatically selects the proper configuration for itself. Therefore, no IKE configuration is necessary on the client PC. Specify the parameters for IPsec, also known as IKE Phase 2. Configurations on both sides of the tunnel must match exactly. However, the Cisco VPN Client automatically selects the proper configuration for itself. Therefore, no IKE configuration is necessary on the client PC. Specify which, if any, internal hosts or networks should be exposed to remote VPN users. If you leave this lis