| 14.2 |  | Tasks to Configure VPN |
| 14.2.1 |  | IPSec configuration tasks overview |

| The remainder of this module will focus on using the theoretical knowledge gained from understanding IPSec, to implement an IPSec-based VPN on a PIX Security Appliance. This section demonstrates how to configure a widely used IPSec-based VPN deployment between two PIX Security Appliances operating as secure gateways, using pre-shared keys for authentication.

The four tasks used to configure IPSec encryption on the PIX Security Appliance are summarized in this section. Subsequent sections of this module discuss each configuration task in greater detail. The four tasks are as follows:

1. Prepare to configure VPN support. This task requires a determination of IPSec policies and ensuring a functional network.
2. Configure IKE parameters. This task consists of several configuration steps that ensure that IKE can set up secure channels to desired IPSec peers. Successful IKE phase one exchanges allow for IPSec SAs and secure sessions.
3. Configure IPSec parameters. IKE phase two involves establishment of IPSec SAs based on configured IPSec parameters between VPN peers.
4. Test and verify VPN configuration. After IPSec is configured, testing it to verify proper functionality is the final step in creating a secured gateway.