Cisco ASA Series User Manual

CHAPTER
1-1
Cisco ASA Series CLI Configuration Guide
1
Configuring IPsec and ISAKMP
This chapter describes how to configure Internet Protocol Security (IPsec) and the Internet Security
Association and Key Management Protocol (ISAKMP) standards to build Virtual Private Networks
(VPNs). It includes the following sections:
• Information About Tunneling, IPsec, and ISAKMP, page 1-1
• Licensing Requirements for Remote Access IPsec VPNs, page 1-3
• Guidelines and Limitations, page 1-7
• Configuring ISAKMP, page 1-8
• Configuring Certificate Group Matching for IKEv1, page 1-16
• Configuring IPsec, page 1-18
• Clearing Security Associations, page 1-38
• Clearing Crypto Map Configurations, page 1-39
• Supporting the Nokia VPN Client, page 1-39
Information About Tunneling, IPsec, and ISAKMP
Tunneling makes it possible to use a public TCP/IP network, such as the Internet, to create secure
connections between remote users and a private corporate network. Each secure connection is called a
tunnel.
The ASA uses the ISAKMP and IPsec tunneling standards to build and manage tunnels. ISAKMP and
IPsec accomplish the following:
• Negotiate tunnel parameters
• Establish tunnels
• Authenticate users and data
• Manage security keys
• Encrypt and decrypt data
• Manage data transfer across the tunnel
• Manage data transfer inbound and outbound as a tunnel endpoint or router

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English