Modules: | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | All |

Module 14: PIX VPN

Module Overview |
14.1 | The PIX Security Appliance Enables a Secure VPN

14.1.1 | PIX Security Appliance VPN capabilities
14.1.2 | PIX Security Appliance VPN topologies
14.1.3 | IPSec enables PIX Security Appliance VPN features
14.1.4 | Overview of IPSec
14.1.5 | IPSec standards supported by the PIX Security Appliance

14.2 | Tasks to Configure VPN

14.2.1 | IPSec configuration tasks overview

14.3 | Task 1 - Prepare to Configure VPN Support

14.3.1 | Step 1 - prepare for IKE
14.3.2 | Step 2 - determine the IKE phase one policy parameters
14.3.3 | Step 3 - plan for IPSec
14.3.4 | Step 4 - determine the IPSec policy
14.3.5 | Step 5 - Ensure that the network works without encryption
14.3.6 | Step 6 - Implicitly permit IPSec bypass

14.4 | Task 2 - Configure IKE Parameters

14.4.1 | Step 1 - enable or disable IKE
14.4.2 | Step 2 - configure an IKE phase one policy
14.4.3 | Step 3 - configure the IKE pre-shared key
14.4.4 | Step 4 - verify IKE phase one policies

14.5 | Task 3 - Configure IPSec Parameters

14.5.1 | Step 1 - configure interesting traffic
14.5.2 | Example crypto ACLs
14.5.3 | Step 2 - configure and IPSec transform set
14.5.4 | Available IPSec transforms
14.5.5 | Step 3 - configure the crypto map
14.5.6 | Step 4 - Apply the crypto map to an interface

14.6 | Task 4 - Test and Verify VPN Configuration

14.6.1 | Verify ACLs and interesting traffic
14.6.2 | Verify correct IKE Phase 1 configuration
14.6.3 | Verify correct IPSec algorithm configuration
14.6.4 | Verify the correct crypto map configuration
14.6.5 | Show and clear the IPSec and IKE SAs
14.6.6 | Debug IKE and IPSec traffic through the PIX Security Appliance

14.7 | The Cisco VPN Client

14.7.1 | Cisco VPN client features
14.7.2 | Topology overview
14.7.3 | PIX Security Appliance assigns the IP address to the VPN client
14.7.4 | Configuring a PIX Security Appliance for a PIX-to-VPN client tunnel
14.7.5 | Configuring a VPN client for a PIx-to-VPN client tunnel

14.8 | Scaling PIX Security Appliance VPNs

14.8.1 | CA server fulfilling requests from IPSec peers
14.8.2 | Enroll a PIX Security Appliance with a CA

Module Summary |
Module Quiz |

| Close Window |

| All contents copyright © 2002 Cisco Systems, Inc. All rights reserved.