Cisco Systems CL-28826-01 Configuring GET VPN Group Members

28-20

User Guide for Cisco Security Manager 4.4

OL-28826-01

Chapter 28 Group Encrypted Transport (GET) VPNs

Configuring GET VPN Group Members

Field Reference

Configuring GET VPN Group Members

Use the Group Members policy to define the group members in a GET VPN topology.

To open the Group Members policy, in the Site-to-Site VPN Manager Window, select an existing GET

VPN topology, then select Group Members from the Policies list.

The group members table lists the members of the GET VPN, showing the device name, GET-enabled

interface, local interface, and security policy. For detailed information about these attributes, see Edit

Group Member Dialog Box, page 28-21.

•To add a group member to the table, click the Add Row button and select the device from the list

presented. Only devices that can be included as group members are shown.

•To edit the endpoint characteristics of a group member, select it and click the Edit Row button. Fill

in the Edit Group Member dialog box (see Edit Group Member Dialog Box, page 28-21).

If you select multiple group members in the table, you can also right-click and select the following

commands to edit just these attributes:

–

Edit Key Server Order—To change the key server list and priority order for the selected group

members.

–

Edit Passive SA Mode—To change whether the selected group members use passive SA mode.

•To delete a group member, select it and click the Delete Row button.

Tip You can toggle between showing the interface roles or the actual interfaces defined by those roles in the

interfaces columns using the Show field below the table.