3825 new setup for VPN

[Frederick Mercado]

I just finished setting up our CME, and now am moving on to allow outside users with etoken smart cards to access VPN. We usually use them for logging into the domain, so this works, but we would like to get help on:

1) Setup VPN on the 3825

2) Allow etoken smart cards over AnyConnect or whatever client.

I would like to ask for someone tohelp us get a sample config, and advise us what we would need for certificate/SC authentication?

We have VLANs setup in the ISR, and we have created a VLAN for VPN so this is setup.

Our current layout is : Internet---> Comcast Business Class modem ---> 3825 ISR --->  Network

We are new to setting up VPN, so any help would be appreciated!

Thanks

[Frederick Mercado]

Bump, anyone?

[paolo bevilacqua]

I don't know what your actual security requirements are, but may I suggest that you do instead a traditional IPSec VPN client configuration with credentials stored on router, or radius server. That will produce sure and fast results.

[Frederick Mercado]

We have a RADIUS for our wireless and can use this for domain authentication. As beginners, how can we set this up with what you described?

[paolo bevilacqua · Accepted solution]

Search for configuration examples on cisco.com, there are various.