Easy VPN Configuration Example
This document provides a Easy VPN (EzVPN) sample configuration, using Cisco1800 series,Cisco 2800 series, and Cisco 3800 series routers.
This document provides a sample Easy VPN (or EzVPN) configuration with thefollowing characteristics:
All traffic between two client branch sites and headquarters passes through aVirtual Private Network (VPN) of IP Security (IPSec) encrypted tunnels.
Techniques used include Internet Key Exchange (IKE) dead peer detection(DPD), split tunneling, and group policy on the server with Domain Name Server (DNS) information, Windows Information Name Service (WINS) information,domain name, and an IP address pool for clients.
Headquarters uses an EzVPN concentrator, a Cisco 3800 series router, with anATM interface.
One branch uses a Cisco 2800 series router and employs a network-mode EzVPNclient with a serial interface, while another branch uses a Cisco 1800 series router and uses client mode EzVPN with an SHDSL interface.
commands demonstrate configurations for the Internet SecurityAssociation Key Management Protocol (ISAKMP) and IPSec SecurityAssociations (SAs) on the EzVPN concentrator, as well as IPSec client EzVPNstatus on the clients.
Easy VPN Configuration ExampleList of TermsATM
—Asynchronous Transfer Mode. A connection switching protocol thatorganizes data into 53-byte cell units, transmitting them via digital signals. Eachcell is processed asynchronously (hence the name) relative to the transmission or arrival of other cells within a single message. Cells are also queued before beingtransmitted in a multiplexing fashion. ATM can be used for many differentservices, including voice, video, or data.
—Domain Name Server. Maps names to Internet Protocol (IP) addresses andaddresses to names.Domain Name Servers maintain lists of domain name and IP address mappings.
—Dead peer detection. An implementation of a client keepalive functionality,to check the availability of the VPN device on the other end of an IPSec tunnel.