24-7
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 24 Managing Site-to-Site VPNs: The Basics
Understanding IPsec Technologies and Policies
IPsec/GRE (Generic Routing
Encapsulation)
See Understanding GRE, page 26-2.
• IKE Proposal
• IPsec Proposal
• One of: IKEv1 Preshared
Key or IKEv1 Public
Key Infrastructure
• GRE Modes
• VPN Global Settings
GRE Dynamic IP
See Understanding GRE Configuration
for Dynamically Addressed Spokes,
page 26-5.
• IKE Proposal
• IPsec Proposal
• One of: IKEv1 Preshared
Key or IKEv1 Public
Key Infrastructure
• GRE Modes
• VPN Global Settings
Dynamic Multipoint VPN (DMVPN).
See Understanding DMVPN,
page 26-10.
• IKE Proposal
• IPsec Proposal
• One of: IKEv1 Preshared
Key or IKEv1 Public
Key Infrastructure
• GRE Modes
• VPN Global Settings
Large Scale DMVPN
See Configuring Large Scale DMVPNs,
page 26-16.
• IKE Proposal
• IPsec Proposal
• One of: IKEv1 Preshared
Key or IKEv1 Public
Key Infrastructure
• GRE Modes
• Server Load Balance
• VPN Global Settings
Easy VPN
See Understanding Easy VPN,
page 27-1.
• IKE Proposal
• Easy VPN IPsec
Proposal
• Client Connection
Characteristics
• If any servers are IOS or
PIX 6.3 devices: User
Group
• If any servers are ASA or
PIX 7.0+ devices:
Connection Profiles
• IKEv1 Public Key
Infrastructure
(mandatory if using
certificates)
• VPN Global Settings
Table 24-1 Site-to-Site VPN IPsec Technologies and Policies (Continued)
Technology Mandatory Policies Optional Policies
