Cisco ASA 5505 - Page 143

To Next Page

To Previous Page

10-5

ASA 5505 Getting Started Guide

78-18003-02

Chapter 10 Scenario: Site-to-Site VPN Configuration

Implementing the Site-to-Site Scenario

Configuring the Security Appliance at the Local Site

Note The adaptive security appliance at the first site is referred to as Security

Appliance 1 in this scenario.

To configure the Security Appliance 1, perform the following steps:

Main Page

Default Chapter3
- Table of Contents3
Chapter 1 Before You Begin9
Chapter 4 Installing the ASA 55059
- Scenarios for Deployment Planning and Configuration12
- Scenario 1: Private Network with External Connectivity14
- Scenario 2: Basic Installation with DMZ15
- Scenario 3: Ipsec Remote-Access VPN16
- Scenario 4: SSL VPN17
- Scenario 5: Site-To-Site VPN17
- Scenario 6: Easy VPN Hardware Client18
- Where to Find Configuration Procedures20
- What to Do Next20
Chapter 2 Deployment Planning9
Chapter 3 Planning a VLAN Configuration21
- Understanding Vlans on the ASA 550521
- Deployment Scenarios Using Vlans24
- Verifying the Package Contents31
Poe Ports and Devices33
Installing the Chassis33
Connecting to Network Interfaces34
Powering on the ASA 550535
Setting up a PC for System Administration36
Optional Procedures37
- Connecting to the Console37
- Installing a Cable Lock38
Ports and Leds39
- Front Panel Components39
- Rear Panel Components42
What to Do Next43
Chapter 5 Configuring the Adaptive Security Appliance45
- About the Factory Default Configuration45
- Using the CLI for Configuration46
- Using the Adaptive Security Device Manager for Configuration47
- Running the ASDM Startup Wizard53
- What to Do Next54
Chapter 6 Scenario: DMZ Configuration55
- Basic Network Layout for a DMZ Configuration55
- Example DMZ Network Topology56
- Configuring the Security Appliance for a DMZ Deployment64
- What to Do Next82
Chapter 7 Scenario: Ipsec Remote-Access VPN Configuration85
- Example Ipsec Remote-Access VPN Network Topology85
- Implementing the Ipsec Remote-Access VPN Scenario86
- Specifying a User Authentication Method93
- (Optional) Configuring User Accounts95
- Configuring Address Pools96
- Configuring Client Attributes97
- Configuring the IKE Policy98
- Configuring Ipsec Encryption and Authentication Parameters100
- Specifying Address Translation Exception and Split Tunneling101
- Verifying the Remote-Access VPN Configuration102
  - What to Do Next103
Chapter 8 Scenario: Configuring Connections for a Cisco Anyconnect VPN Client105
- About SSL VPN Client Connections105
- Obtaining the Cisco Anyconnect VPN Client Software106
- Example Topology Using Anyconnect SSL VPN Clients107
- Implementing the Cisco SSL VPN Scenario107
- What to Do Next119
Chapter 9 Scenario: SSL VPN Clientless Connections121
- About Clientless SSL VPN121
  - Security Considerations for Clientless SSL VPN Connections122
- Example Network with Browser-Based SSL VPN Access123
- Implementing the Clientless SSL VPN Scenario124
- Information to Have Available125
- Starting ASDM125
- Configuring the ASA 5505 for Browser-Based SSL VPN Connections127
- Specifying the SSL VPN Interface128
- Specifying a User Authentication Method130
- Specifying a Group Policy131
- Creating a Bookmark List for Remote Users132
- Verifying the Configuration136
  - What to Do Next138
Chapter 10 Scenario: Site-To-Site VPN Configuration139
- Example Site-To-Site VPN Network Topology139
- Implementing the Site-To-Site Scenario140
  - Information to Have Available141
  - Configuring the Site-To-Site VPN141
- Configuring the Other Side of the VPN Connection152
- What to Do Next152
Chapter 11 Scenario: Easy VPN Hardware Client Configuration155
- Using an ASA 5505 as an Easy VPN Hardware Client155
- Client Mode and Network Extension Mode156
- Configuring the Easy VPN Hardware Client159
  - Starting ASDM with the ASDM Launcher160
  - Configuring the Hardware Client163

Cisco ASA 5505 - Page 143

Table of Contents

Other manuals for Cisco ASA 5505

Related product manuals