ConfiguringCiscoEasyVPNandEasyVPNServerUsingSDM文件材料.ppt

Group Policy Configuration Location Option 1: Local Router Configuration 1. 2. Option 2: External Location via RADIUS 1. 2. Option 2: External Locationvia RADIUS (Cont.) 3. 1. 2. 4. User Authentication Option 1: Local User Database 2. 3. 1. Local User Database—Adding Users 1. 2. 3. 4. 5. 6. Option 2: External UserDatabase via RADIUS 2. 3. 1. Local Group Policies Local Group Policies Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 Cisco Network Academy. All rights reserved.. CCNP+ ISCW v1.0 IPsec VPNs Configuring Cisco Easy VPN and Easy VPN Server Using SDM Introducing Cisco Easy VPN Describe Easy VPN Server and Easy VPN Remote Cisco Easy VPN RemoteConnection Process The VPN client initiates the IKE Phase 1 process.VPN客户端初始化IKE阶段1处理 The VPN client establishes an ISAKMP SA.VPN客户端建立ISAKMP的安全联盟. The Easy VPN Server accepts the SA proposal.Easy VPN Server接受客户端的SA建议. The Easy VPN Server initiates a username and password challenge.Easy VPN Server初始化用户名和密码挑战. The mode configuration process is initiated.模式配置处理进行初始化. The RRI process is initiated.RRI处理被初始化. IPsec quick mode completes the connection.IPsec快速模式完成连接. Step 1: The VPN Client Initiatesthe IKE Phase 1 Process Using pre-shared keys? Initiate aggressive mode.是否使用预共享密钥? 初始化积极模式. Using digital certificates? Initiate main mode.使用数字证书? 初始化主模式. Step 2: The VPN Client Establishesan ISAKMP SA The VPN client attempts to establish an SA between peer IP addresses by sending multiple ISAKMP proposals to the Easy VPN Server. To reduce manual configuration on the VPN client, these ISAKMP proposals include several combinations of the following: Encryption and hash algorithms Authentica