12-1
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
CHAPT ER
12
Easy VPN Remote
Cable modems, xDSL routers, and other forms of broadband access provide
high-performance connections to the Internet, but many applications also require
the security of VPN connections that perform a high level of authentication and
that encrypt the data between two particular endpoints. However, establishing a
VPN connection between two routers can be complicated and typically requires
tedious coordination between network administrators to configure t he VPN
parameters of the two routers.
The Cisco Easy VPN Remote feature eliminates much of this tedious work by
implementing Cisco Unity Client Protocol, which allows most VPN parameters to
be defined at a Cisco IOS Easy VPN server. This server can be a dedicated VPN
device, such as a Cisco VPN 3000 concentrator or a Cisco PIX Firewall or a Cisco
IOS router that supports the Cisco Unity Client Protocol.
After the Cisco Easy VPN server has been configured, a VPN connection can be
created with minimal configuration on an Easy VPN remote, such as a Cisco 800
series router or a Cisco 2800 series router. When the Easy VPN remote initiates
the VPN tunnel connection, the Cisco Easy VPN server pushes the IPsec policies
to the Easy VPN remote and creates the corresponding VPN tunnel connection.
The Cisco Easy VPN Remote feature provides for automatic management of the
following details:
•Negotiating tunnel parameters, such as addresses, algorithms, and lifetime.
•Establishing tunnels according to the parameters that were set.
•Automatically creating the NAT or Port Address Translation (PAT) and
associated access lists that are needed, if any.