| 14.7 |  | The Cisco VPN Client |
| 14.7.3 |  | PIX Security Appliance assigns the IP address to the VPN Client |

| When the VPN Client initiates ISAKMP with the PIX Security Appliance, the VPN group name and pre-shared key are sent to the PIX Security Appliance. The PIX Security Appliance then uses the group name to look up the configured VPN Client policy attributes for the given VPN Client. The matching policy attributes to the VPN Client are downloaded during the IKE negotiation.

In Figure , the PIX Security Appliance uses IKE mode configuration to push IPSec policy, defined with the vpngroup command, to the VPN Client. The VPN Client IP address 10.0.0.20, is set with the PIX Security Appliance ip local pool and vpngroup commands.

| Lab Activity e-Lab Activity: IKE Mode Configuration-PIX In this activity, the student will configure IKE mode on the PIX Security Appliance.