Cisco FirePOWER ASA 5500 series Configuration Manual page 20

Contents
Configuring L2TP over IPSec
28
C H A P T E R
Setting General IPSec VPN Parameters
29
C H A P T E R
Configuring Tunnel Groups, Group Policies, and Users
30
C H A P T E R
Cisco Security Appliance Command Line Configuration Guide
xx
L2TP Overview
28-1
IPSec Transport and Tunnel Modes
Configuring L2TP over IPSec Connections
Tunnel Group Switching
Viewing L2TP over IPSec Connection Information
Using L2TP Debug Commands
Enabling IPSec Debug
Getting Additional Information
Configuring VPNs in Single, Routed Mode
Configuring IPSec to Bypass ACLs
Permitting Intra-Interface Traffic
NAT Considerations for Intra-Interface Traffic
Setting Maximum Active IPSec VPN Sessions
Using Client Update to Ensure Acceptable Client Revision Levels
Understanding Load Balancing
Implementing Load Balancing
Prerequisites
29-6
Eligible Platforms
29-7
Eligible Clients
29-7
VPN Load-Balancing Cluster Configurations
Some Typical Mixed Cluster Scenarios
Scenario 1: Mixed Cluster with No WebVPN Connections
Scenario 2: Mixed Cluster Handling WebVPN Connections
Configuring Load Balancing
Configuring the Public and Private Interfaces for Load Balancing
Configuring the Load Balancing Cluster Attributes
Configuring VPN Session Limits
Overview of Tunnel Groups, Group Policies, and Users
Tunnel Groups
30-2
General Tunnel-Group Connection Parameters
IPSec Tunnel-Group Connection Parameters
WebVPN Tunnel-Group Connection Parameters
Configuring Tunnel Groups
28-1
28-2
28-3
28-5
28-5
28-7
28-8
28-8
29-1
29-1
29-1
29-2
29-3
29-3
29-5
29-6
29-7
29-8
29-9
29-11
30-2
30-3
30-4
30-5
29-3
29-8
29-8
29-9
29-10
30-1
30-1
OL-10088-01