Appendix B Site-to-Site VPN User Interface Reference

 

 

Site to Site VPN Policies

 

Table B-18

VPN Global Settings Page > General Settings Tab (continued)

 

 

 

Element

 

Description

 

 

Enable Split Tunneling

When selected (the default), enables you to configure split tunneling

 

 

in your VPN topology.

 

 

Split tunneling enables you to transmit both secured and unsecured

 

 

traffic on the same interface. Split tunneling requires that you

 

 

specify exactly which traffic will be secured and what the

 

 

destination of that traffic is, so that only the specified traffic enters

 

 

the IPSec tunnel, while the rest is transmitted unencrypted across

 

 

the public network.

 

 

Enable Spoke-to-Spoke

Supported on PIX 7.0 and ASA devices.

Connectivity through the Hub

When selected, enables direct communication between spokes in a

 

 

 

 

hub-and-spoke VPN topology, in which the hub is an ASA/PIX 7.0

 

 

device.

 

 

Enable Default Route

Supported on Cisco IOS routers and Catalyst 6500/7600 devices.

 

 

When selected, the device uses the configured external interface as

 

 

the default outbound route for all incoming traffic.

 

 

 

Save button

 

Saves your changes to the server but keeps them private.

 

 

Note To publish your changes, click the Submit button on the

 

 

toolbar.

 

 

 

Close button

 

Closes the Site-to-Site VPN window.

 

 

 

Help button

 

Opens help for this tab.

 

 

 

 

Preshared Key Page

Use the Preshared Key page to view or edit the parameters for a preshared key policy.

For information about Preshared Key policies, see Understanding Preshared Key Policies, page 9-74.

Note A preshared key policy is not available when configuring Easy VPN.

 

 

User Guide for Cisco Security Manager 3.0.1

 

 

 

 

 

 

OL-8214-02

 

 

B-53

 

 

 

Page 53
Image 53
3D Innovations 3.0.1 appendix Preshared Key