Cisco ASA Series Cli Configuration Manual page 1751

Chapter 1 Configuring Remote Access IPsec VPNs
Context Mode Guidelines
Supported only in single context mode. Does not support multiple context mode.
Firewall Mode Guidelines
Supported only in routed firewall mode. Transparent mode is not supported.
Failover Guidelines
IPsec VPN sessions are replicated in Active/Standby failover configurations only. Active/Active failover
configurations are not supported.
Configuring
This section describes how to configure remote access VPNs and includes the following topics:
•
•
•
•
•
•
•
•
•
Configuring Interfaces
An ASA has at least two interfaces, referred to here as outside and inside. Typically, the outside interface
is connected to the public Internet, while the inside interface is connected to a private network and is
protected from public access.
To begin, configure and enable two interfaces on the ASA. Then assign a name, IP address and subnet
mask. Optionally, configure its security level, speed and duplex operation on the security appliance.
To configure interfaces, perform the following steps, using the command syntax in the examples:
Remote Access IPsec VPNs
Configuring Interfaces, page 1-7
Configuring ISAKMP Policy and Enabling ISAKMP on the Outside Interface, page 1-8
Configuring an Address Pool, page 1-10
Adding a User, page 1-10
Creating an IKEv1 Transform Set or IKEv2 Proposal, page 1-10
Defining a Tunnel Group, page 1-11
Creating a Dynamic Crypto Map, page 1-12
Creating a Crypto Map Entry to Use the Dynamic Crypto Map, page 1-13
Saving the Security Appliance Configuration, page 1-14
Configuring Remote Access IPsec VPNs
Cisco ASA Series CLI Configuration Guide
1-7