Cisco Systems ISA550

VPN

Configuring a Site-to-Site VPN

Cisco ISA500 Series Integrated Security Appliances Administration Guide 342

•WAN Interface: The WAN port that traffic passes through over the IPsec

VPN tunnel.

•Peers: The IP address of the remote peer.

•Local: The local network of the local peer.

•Remote: The remote network of the remote peer.

•IKE: The IKE policy used for the IPsec VPN policy.

•Transfor m: The transform set used for the IPsec VPN policy.

STEP 2 Click On to enable site-to-site VPN, or click Off to disabl e it.

NOTE: Enabling the Site-to-Site VPN feature will disable the Teleworker VPN

Client feature.

STEP 3 If you enable site-to-site VPN, perform the following actions:

• To add a new IPsec VPN policy, click Add. See Configuring IPs ec VPN

Policies, page 343.

• To edit an existing IPsec VPN policy, click the Edit (x) icon.

• To delete an IPsec VPN policy, click the Delete (x) icon.

• To delete multiple IPsec VPN policies, check them and click Delete.

• To enable an IPsec VPN policy, check the b ox in the Enable column.

• To manually establish a VPN tunnel, click the Connect icon for an enabled

IPsec VPN policy.

• To manually terminate a VPN connection, click the Disconnect icon.

• To refresh the data for site-to-site VPN, click Refresh.

STEP 4 Click Save to apply your settings.