Chapter 17 Configuring Virtual Private Networks

Configuring the VPN Feature

 

Table 17-1

VPN Configuration Checklist

 

 

 

Configuration Steps

 

Notes and Related Procedures

 

 

Step 1

Set up the VPN concentrators for

For configuration information, refer to the documentation for the

 

each VPN Gateway.

VPN concentrator; such the following:

 

 

 

SSL VPN Client (SVC) on ASA with ASDM Configuration

 

 

 

Example

 

 

 

http://www.cisco.com/en/US/products/ps6120/products_conf

 

 

 

iguration_example09186a008071c428.shtml

 

 

 

Note The ASA software must be version 8.0.4 or later, and the

 

 

 

“AnyConnect Cisco VPN Phone” license must be installed.

 

 

 

Note To avoid long delays when the user upgrades the firmware

 

 

 

or configuration information on a remote phone, Cisco

 

 

 

recommends that you set up the VPN concentrator close in

 

 

 

the network to the TFTP or Cisco Unified

 

 

 

Communications Manager server. If this is not feasible in

 

 

 

your network, you can set up an alternate TPTP or load

 

 

 

server that is next to the VPN concentrator.

 

 

 

SSL VPN Client (WebVPN) on IOS with SDM Configuration

 

 

 

Example

 

 

 

http://www.cisco.com/en/US/products/ps6496/products_conf

 

 

 

iguration_example09186a008072aa61.shtml

 

 

 

Note The IOS software must be versions 15.1(2)T or later.

 

 

 

Feature Set/License:" Universal (Data & Security & UC)"

 

 

 

for the 2900 models and “Advanced Security” for the 2800

 

 

 

models with SSL VPN licenses activated.

 

 

 

Note To avoid long delays when the user upgrades the firmware

 

 

 

or configuration information on a remote phone, Cisco

 

 

 

recommends that you set up the VPN concentrator close in

 

 

 

the network to the TFTP or Cisco Unified

 

 

 

Communications Manager server. If this is not feasible in

 

 

 

your network, you can set up an alternate TPTP or load

 

 

 

server that is next to the VPN concentrator.

 

 

 

Step 2

Upload the VPN concentrator

Chapter 18, “Configuring a VPN Gateway”

 

certificates.

 

 

 

 

 

Step 3

Configure the VPN Gateways.

Chapter 18, “Configuring a VPN Gateway”

 

 

 

Step 4

Create a VPN Group using the

Chapter 19, “Configuring a VPN Group”

 

VPN Gateways.

 

 

 

 

 

Step 5

Configure the VPN Profile

Chapter 20, “Configuring a VPN Profile”

 

 

 

 

 

Cisco Unified Communications Manager Security Guide

17-2

OL-24124-01

Page 2
Image 2
Cisco Systems OL-24124-01 manual Configuration Steps, 17-2