EZVPN between ASAs
Server:
===========
Server configuration will be like RAVPN configuration.
Phase 1 policy
Phase 2 policy
Create a pool
Create Split access list (Extended)
Create group policy
Create a tunnel group and call-in the group policy
In the group policy attributes, put this additional command:
nem enable
Create dynamic map and then call the dynamic map in crypto map
Enable crypto map on interface.
Client end configuration:
===================
vpnclient server "ip add of server ASA"
vpnclient mode network-extentention-mode
vpnclient vpngroup <tunnel group name that we have created on other ASA>
password <Password that we have created as pre-shared key in our tunnel group on server ASA>
vpnclient username <a username that we have created on server ASA> password <password for that user>
client nem-st-autoconnect
vpnclient enable
Debugs::
Debug cry isa 200
0 comments:
Post a Comment