![background image](http://html.mh-extra.com/html/cisco/5505-asa-firewall-edition-bundle/5505-asa-firewall-edition-bundle_cli-configuration-manual_186241651.webp)
1-17
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Profiles, Group Policies, and Users
Configuring Connection Profiles
Configuring LAN-to-LAN Connection Profiles
An IPsec LAN-to-LAN VPN connection profile applies only to LAN-to-LAN IPsec client connections.
While many of the parameters that you configure are the same as for IPsec remote-access connection
profiles, LAN-to-LAN tunnels have fewer parameters. The following sections show you how to
configure a LAN-to-LAN connection profile:
•
Specifying a Name and Type for a LAN-to-LAN Connection Profile, page 70-17
•
Configuring LAN-to-LAN Connection Profile General Attributes, page 70-17
•
Configuring LAN-to-LAN IPsec IKEv1 Attributes, page 70-18
Default LAN-to-LAN Connection Profile Configuration
The contents of the default LAN-to-LAN connection profile are as follows:
tunnel-group DefaultL2LGroup type ipsec-l2l
tunnel-group DefaultL2LGroup general-attributes
no accounting-server-group
default-group-policy DfltGrpPolicy
tunnel-group DefaultL2LGroup ipsec-attributes
no ikev1 pre-shared-key
peer-id-validate req
no chain
no ikev1 trust-point
isakmp keepalive threshold 10 retry 2
LAN-to-LAN connection profiles have fewer parameters than remote-access connection profiles, and
most of these are the same for both groups. For your convenience in configuring the connection, they are
listed separately here. Any parameters that you do not explicitly configure inherit their values from the
default connection profile.
Specifying a Name and Type for a LAN-to-LAN Connection Profile
To specify a name and a type for a connection profile, enter the
tunnel-group
command, as follows:
hostname(config)#
tunnel-group
tunnel_group_name
type
tunnel_type
For a LAN-to-LAN tunnel, the type is
ipsec-l2l
.; for example, to create the LAN-to-LAN connection
profile named docs, enter the following command:
hostname(config)#
tunnel-group docs type ipsec-l2l
hostname(config)#
Configuring LAN-to-LAN Connection Profile General Attributes
To configure the connection profile general attributes, perform the following steps:
Step 1
Enter tunnel-group general-attributes mode by specifying the general-attributes keyword in either single
or multiple context mode:
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......