Cisco SRP521W-K9-G1 Administration Guide - Page 193

IKE Phase 2P, modp 768], modp 1024], modp 1536], modp 2048], modp 3072], Mode Configuration,

Get Cisco SRP521W-K9-G1 PDF manuals and user guides View all Cisco SRP521W-K9-G1 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 193 highlights

Configuring VPN Cisco VPN Server 7 Cisco VPN Server Settings IKE Phase 2P PFS Group Diffie-Hellman group options for Perfect Forward Secrecy (PFS) in phase 2. Choices are: 1 [modp 768], 2 [modp 1024], 5 [modp 1536], 14 [modp 2048], or 15 [modp 3072]. SA Lifetime Defines how long an IPSec SA (security association) will be used. The default is 30 minutes. Mode Configuration IP Pool Starting IP Address: Starting IP address of the range of addresses that are assigned to the remote client. This range must not be in the same subnet as any VLAN. Subnet Mask: Mask for the address range assigned to remote clients. The defined mask must be large enough to accommodate the maximum number of connections supported by your SRP. DNS1 Primary DNS server to be used by remote clients. DNS2 Secondary DNS server to be used by remote clients. WINS1 Primary WINS server to be used by remote clients. WINS2 Secondary WINS server to be used by remote clients Banner Message displayed to the remote user after they log on. The banner allows up to 500 printable ASCII characters on 1 line. Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models) 193

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
Configuring VPN
Cisco VPN Server
Cisco SRP500 Series Services Ready Platforms Administration Guide (SRP520 Models)
193
7
IKE Phase 2P
PFS Group
Diffie-Hellman group options for Perfect Forward
Secrecy (PFS) in phase 2. Choices are:
1 [modp 768]
,
2
[modp 1024]
,
5 [modp 1536]
,
14 [modp 2048]
, or
15 [modp 3072]
.
SA Lifetime
Defines how long an IPSec SA (security association) will
be used. The default is 30 minutes.
Mode Configuration
IP Pool
Starting IP Address
: Starting IP address of the range of
addresses that are assigned to the remote client. This
range must not be in the same subnet as any VLAN.
Subnet Mask
: Mask for the address range assigned to
remote clients. The defined mask must be large enough
to accommodate the maximum number of connections
supported by your SRP.
DNS1
Primary DNS server to be used by remote clients.
DNS2
Secondary DNS server to be used by remote clients.
WINS1
Primary WINS server to be used by remote clients.
WINS2
Secondary WINS server to be used by remote clients
Banner
Message displayed to the remote user after they log on.
The banner allows up to 500 printable ASCII characters
on 1 line.
Cisco VPN Server Settings