30-9
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter30 Managing Remote Access VPNs on ASA and PIX 7.0+ Devices
Configuring Connection Profiles (ASA, PIX 7.0+)
•(Policy view) Select Site-to-Site VPN > Connection Profiles (PIX7.0/ASA). Select an existing
policy or create a new one.
This section contains the following topics:
•General Tab (Connection Profiles), page30-9
•AAA Tab (Connection Profiles), page 30-11
•Secondary AAA Tab (Connection Profiles), page30-14
•IPSec Tab (Connection Profiles), page30-16
•SSL Tab (Connection Profiles), page30-18
General Tab (Connection Profiles)
Use the General tab of the Connection Profiles dialog box to configure the basic properties for a VPN
Connection Profile policy. These properties are used in remote access IPsec and SSL VPNs and
site-to-site Easy VPN topologies.
Navigation Path
•Remote Access VPNs—From the Connection Profiles page (see Connection Profiles Page,
page 30-8), click the Add Row (+) button, or select a profile and click the Edit Row (pencil) button,
to open the Connection Profiles dialog box. Click the General tab if necessary.
•Easy VPN topologies—Select the site-to-site VPN Connection Profiles policy in either Policy view
or in the Site-to-Site VPN Manager with an Easy VPN topology selected (see Connection Profiles
Page, page 30-8). Click the General tab if necessary.
Related Topics
•Configuring Connection Profiles (ASA, PIX 7.0+), page 30-6
•ASA Group Policies Dialog Box, page 33-1
•Understanding Networks/Hosts Objects, page 6-74
•Configuring a Connection Profile Policy for Easy VPN, page27-13
•Understanding Easy VPN, page 27-1
Field Reference
Table30-2 Connection Profile General Tab
Element Description
Connection Profile Name The name of the connection profile (tunnel group).
Group Policy If required, the name of the ASA group policy object that defines the
default user group associated with the connection profile. A group
policy is a collection of user-oriented attribute/value pairs stored either
internally on the device or externally on a RADIUS/LDAP server.
Click Select to select an existing object or to create a new one.