27-10
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 27 Easy VPN
Configuring an IPsec Proposal for Easy VPN
Configuring an IPsec Proposal for Easy VPN
Use the Easy VPN IPsec Proposal page to configure the IPsec proposal used during IKE Phase 2
negotiations for Easy VPN topologies. The IPsec proposal is configured on the IPSec Proposal tab; the
options are described below.
In Easy VPN topologies, you can also configure a dynamic virtual interface on the Dynamic VTI tab.
For an explanation of dVTI configuration, see Configuring Dynamic VTI for Easy VPN, page27-12.
Note This topic describes the IPsec Proposal page when the site-to-site VPN technology is Easy VPN. For a
description of the IPsec Proposal page when the site-to-site VPN technology is something else, see
Configuring IPsec Proposals in Site-to-Site VPNs, page 25-21.
Navigation Path
•(Site-to-Site VPN Manager Window, page24-18) Select an Easy VPN topology in the VPNs
selector, then select Easy VPN IPsec Proposal in the Policies selector. Click the IPSec Proposal
tab.
•(Policy view) Select Site-to-Site VPN > Easy VPN IPsec Proposal from the Policy Types selector.
Select an existing shared policy or create a new one. Click the IPSec Proposal tab.
Related Topics
•Understanding Easy VPN, page 27-1
•Configuring an IPsec Proposal for Easy VPN, page 27-10
•Understanding AAA Server and Server Group Objects, page 6-24
•Understanding IPsec Proposals, page 25-17
Category The category assigned to the object. Categories help you organize and
identify rules and objects. See Using Category Objects, page 6-12.
Allow Value Override per
Device
Overrides
Edit button
Whether to allow the object definition to be changed at the device level.
For more information, see Allowing a Policy Object to Be Overridden,
page 6-18 and Understanding Policy Object Overrides for Individual
Devices, page 6-17.
If you allow device overrides, you can click the Edit button to create,
edit, and view the overrides. The Overrides field indicates the number
of devices that have overrides for this object.
Table27-2 Credentials Dialog Box (Continued)
Element Description