VPN
Configuring a Site-to-Site VPN
Cisco ISA500 Series Integrated Security Appliances Administration Guide 352
8
STEP 5 Click Save to apply your settings.
Remote Teleworker Configuration Examples
Use Case: You want to esta blish a site-to-s ite VPN tunnel bet ween the secu rity
appliance and a remote UC500 to provide voice and data services to phones at a
remote site.
Solution: When you use Cisco Configuration Assistant (CCA) Multisite Manager
(MSM) to configure the site-to-site VPN settings on the UC500, CCA MSM uses the
default IKE policy and transform set. In this case, the security appliance must
create an IPsec VPN policy as follows to establish the site-to-site VPN tunnel with
the UC500.
ISA500
IP Phone
IP
UC500
IP Phone
IP
site-to-site VPN
283881
Field Setting
Remote Network Choose an address group that includes multiple
subnets on the UC500.
NOTE: By default, three VLANs (192.168.10.0/24,
10.1.1.0/24, and 10.1.10.0/24) are predefined on the
UC500.
IKE Policy Encr yption = ESP_3DES
Hash = SHA1
D-H Group = Group 2
NOTE: The default IKE policy used on the UC500
cannot be modified through CCA. The above IKE
settings must be configured on the security appliance.