![background image](http://html.mh-extra.com/html/cisco/5505-asa-firewall-edition-bundle/5505-asa-firewall-edition-bundle_cli-configuration-manual_186241759.webp)
1-15
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Remote Access IPsec VPNs
Feature History for Remote Access VPNs
hostname(config)#
crypto ipsec ikev1 transform set FirstSet esp-3des esp-md5-hmac
hostname(config)#
tunnel-group testgroup type remote-access
hostname(config)#
tunnel-group testgroup general-attributes
hostname(config-general)#
address-pool testpool
hostname(config)#
tunnel-group testgroup ipsec-attributes
hostname(config
-
ipsec)#
ikev1 pre-shared-key 44kkaol59636jnfx
hostname(config)#
crypto dynamic-map dyn1 1 set ikev1 transform-set FirstSet
hostname(config)#
crypto dynamic-map dyn1 1 set reverse-route
hostname(config)#
crypto map mymap 1 ipsec-isakmp dynamic dyn1
hostname(config)#
crypto map mymap interface outside
hostname(config)#
write memory
The following example shows how to configure a remote access IPsec/IKEv2 VPN:
hostname(config)#
interface ethernet0
hostname(config-if)#
ip address 10.10.4.200 255.255.0.0
hostname(config-if)#
nameif outside
hostname(config-if)#
no shutdown
hostname(config)#
crypto ikev2 policy 1
hostname
(config-ikev2-policy)# group 2
hostname
(config-ikev2-policy)# integrity sha
hostname
(config-ikev2-policy)# lifetime 43200
hostname
(config-ikev2-policy)# prf sha
hostname(config)#
crypto ikev2 outside
hostname(config)#
ip local pool testpool 192.168.0.10-192.168.0.15
hostname(config)#
username testuser password 12345678
hostname(config)#
crypto ipsec ikev2 ipsec-proposal FirstSet
hostname
(config-ipsec-proposal)# protocol esp encryption 3des aes
hostname(config)#
tunnel-group testgroup type remote-access
hostname(config)#
tunnel-group testgroup general-attributes
hostname(config-general)#
address-pool testpool
hostname(config)#
tunnel-group testgroup webvpn-attributes
hostname(config
-
webvpn)#
authentication aaa certificate
hostname(config)#
crypto dynamic-map dyn1 1 set ikev2 ipsec-proposal FirstSet
hostname(config)#
crypto dynamic-map dyn1 1 set reverse-route
hostname(config)#
crypto map mymap 1 ipsec-isakmp dynamic dyn1
hostname(config)#
crypto map mymap interface outside
hostname(config)#
write memory
Feature History for Remote Access VPNs
lists the release history for this feature.
Table 1-1
Feature History for Feature-1
Feature Name
Releases
Feature Information
Remote access VPNs for IPsec IKEv1 and SSL. 7.0
Remote access VPNs allow users to connect to a central site
through a secure connection over a TCP/IP network such as
the Internet.
Remote access VPNs for IPsec IKEv2
8.4(1)
Added IPsec IKEv2 support for the AnyConnect Secure
Mobility Client.
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......