ConfiguringCiscoEasyVPNandEasyVPNServerUsingSDM幻灯片.pptVIP

Group Policy Configuration Location Option 1: Local Router Configuration 1. 2. Option 2: External Location via RADIUS 1. 2. Option 2: External Locationvia RADIUS (Cont.) 3. 1. 2. 4. User Authentication Option 1: Local User Database 2. 3. 1. Local User Database—Adding Users 1. 2. 3. 4. 5. 6. Option 2: External UserDatabase via RADIUS 2. 3. 1. Local Group Policies Local Group Policies Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 IPsec VPNs Configuring Cisco Easy VPN and Easy VPN Server Using SDM Introducing Cisco Easy VPN Introducing Cisco Easy VPN Cisco Easy VPN has two main functions:Cisco Easy VPN有两种主要的功能: Simplify client configuration简单的客户端配置 Centralize client configuration and dynamically push the configuration to clients集中的客户端配置以及向客户端推送配置 How are these two goals achieved?如何完成两个目标? IKE Mode Config functionality is used to download some configuration parameters to clients.IKE模式配置用于下载配置参数到客户端 Clients are preconfigured with a set of IKE policies and IPsec transform sets.客户端预先配置IKE策略集和IPsec变换集 Cisco Easy VPN Components Easy VPN Server: Enables Cisco IOS routers, Cisco PIX Firewalls, and Cisco VPN Concentrators to act as VPN head-end devices in site-to-site or remote-access VPNs, in which the remote office devices are using the Cisco Easy VPN Remote feature Easy VPN Server: 在站点到站点或者远程访问VPN中能够激活Cisco IOS 路由器、Cisco PIX防火墙和Cisco VPN集中器充当VPN前端设备为远端设备提供使用Cisco Easy VPN远程连接特性. Easy VPN Remote: Enables Cisco IOS routers, Cisco PIX Firewalls, and Cisco VPN Hardware Clients or Software Clients to act as remote VPN clientsEasy VPN Remote: 能够激活Cisco IOS 路由器、Cisco PIX防火墙和C