Cisco ASA 5512-X Cli Configuration Guide

1-7
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Remote Access IPsec VPNs
Configuring Remote Access IPsec VPNs
Context Mode Guidelines
Supported only in single context mode. Does not support multiple context mode.
Firewall Mode Guidelines
Supported only in routed firewall mode. Transparent mode is not supported.
Failover Guidelines
IPsec VPN sessions are replicated in Active/Standby failover configurations only. Active/Active failover
configurations are not supported.
Configuring Remote Access IPsec VPNs
This section describes how to configure remote access VPNs and includes the following topics:
• Configuring Interfaces, page 1-7
• Configuring ISAKMP Policy and Enabling ISAKMP on the Outside Interface, page 1-8
• Configuring an Address Pool, page 1-10
• Adding a User, page 1-10
• Creating an IKEv1 Transform Set or IKEv2 Proposal, page 1-10
• Defining a Tunnel Group, page 1-11
• Creating a Dynamic Crypto Map, page 1-12
• Creating a Crypto Map Entry to Use the Dynamic Crypto Map, page 1-13
• Saving the Security Appliance Configuration, page 1-14
Configuring Interfaces
An ASA has at least two interfaces, referred to here as outside and inside. Typically, the outside interface
is connected to the public Internet, while the inside interface is connected to a private network and is
protected from public access.
To begin, configure and enable two interfaces on the ASA. Then assign a name, IP address and subnet
mask. Optionally, configure its security level, speed and duplex operation on the security appliance.
To configure interfaces, perform the following steps, using the command syntax in the examples:

Cisco ASA 5512-X Specifications

General

Brand	Cisco
Model	ASA 5512-X
Category	Firewall
Language	English