Cisco Systems OL-4015-08 Add or Edit Easy VPN Remote: Authentication Information

Chapter9 Easy VPN Remote
Edit Easy VPN Remote
9-98
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
You can enable remote management of the router by checking the box to
request a server-assigned IP address for you router. This IP address can be
used for connecting to your router for remote management and
troubleshooting (ping, Telnet, and Secure Shell). This mode is called
Network Extension Plus.
Network Extension Options
To allow subnets not directly connected to your router to use the tunnel, follow
these steps:
Step1 In the Options window, check the check box to allow multiple subnets.
Step2 Choose to enter the subnets manually, or choose an existing Access Control List
(ACL).
Step3 To enter the subnets manually, click the Add button and enter the subnet address
and mask. SDM will generate an ACL automatically.
Note The subnets you enter must not be directly connected to the router.
Step4 To add an existing ACL, enter its name or choose it from the drop-down list.
Add or Edit Easy VPN Remote: Authentication Information
Use this window to enter the information required for the router to be
authenticaticated by the Easy VPN server or concentrator.
Device Authentication
Choose Digital Certificates or Preshared Key.
If using a preshared key, obtain the IPSec group name and IKE key value from
your network administrator. The group name must match the group name defined
on the VPN concentrator or server.