8-57
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter8 Site-to-Site VPN
Edit Site-to-Site VPN
Sequence Number
The sequence number for this connection. Becau se an IPSec policy may be used
in more than one connection, the combination of the sequence number and IPSec
policy name uniquely identifies this VPN connection. The sequence number does
not prioritize the VPN connection; the router will attempt to establish all
configured VPN connections regardless of sequence number.
Peers
The IP addresses or host names of the devices at the other end of the VPN
connection. When a connection contains multiple peers, their IP addresses or ho st
names are separated by commas. Multiple peers might be configured to provide
alternative routing paths for the VPN connection.
Transform Set
This shows the name of the transform set used by this VPN connection. Multiple
transform set names are separated by commas. A transform set specifies the
algorithms that will be used to encrypt data, ensure data integrity, and provide
data compression. Both peers must use the same transform set, and they negotiate
to determine which set they will use. Multiple transform sets may be defined to
ensure that the router can offer a transform set that the negotiating peer will ag ree
to use. The transform sets is a component of the IPSec policy.
IPSec Rule
The rule that determines which traffic should be encrypted on this connection.
The IPSec rule is a component of the IPSec Policy.
Type
One of the following:
•Static—This is a static site-to-site VPN tunnel. The VPN tunnel uses static
crypto maps.
•Dynamic—This is a dynamic site-to-site VPN tunnel. The VPN tunnel uses
dynamic crypto maps.
Add Button
Click to add a VPN connection