VPN

8

 

Configuring a Site-to-Site VPN

 

 

 

 

 

STEP 5 Click Save to apply your settings.

Remote Teleworker Configuration Examples

Use Case: You want to establish a site-to-site VPN tunnel between the security appliance and a remote UC500 to provide voice and data services to phones at a remote site.

IP

site-to-site VPN

 

IP Phone

UC500

 

IP

IP Phone ISA500

283881

Solution: When you use Cisco Configuration Assistant (CCA) Multisite Manager (MSM) to configure the site-to-site VPN settings on the UC500, CCA MSM uses the default IKE policy and transform set. In this case, the security appliance must create an IPsec VPN policy as follows to establish the site-to-site VPN tunnel with the UC500.

Field

Setting

Remote Network

Choose an address group that includes multiple

 

subnets on the UC500.

 

NOTE: By default, three VLANs (192.168.10.0/24,

 

10.1.1.0/24, and 10.1.10.0/24) are predefined on the

 

UC500.

IKE Policy

Encryption = ESP_3DES

 

Hash = SHA1

 

D-H Group = Group 2

 

NOTE: The default IKE policy used on the UC500

 

cannot be modified through CCA. The above IKE

 

settings must be configured on the security appliance.

Cisco ISA500 Series Integrated Security Appliances Administration Guide

352

Page 352
Image 352
Casio ISA550WBUN3K9 manual Remote Teleworker Configuration Examples, Field Setting, Remote Network, IKE Policy