Ezvpn Configuration

[ms_sourav]

Hi All,

     Can anybody tell me how to configure cisco easy VPN Server and client in IOS Router (with diagram)?

[Jennifer Halim · Accepted solution]

Here we go:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080808395.shtml

Hope that helps.

[ms_sourav]

Hi Jennifer  

         How are you?

         That document will really help me to configure the ezvpn but there is many commands which I don't know what they actually do! for example "crypto dynamic-map"  What is the reason for providing ip default-gateway 172.16.186.1? Is this nessesery to use route-map here? It will be grateful if you discuss it in little more detail.

[Jennifer Halim · Accepted solution]

1/ Yes, "crypto dynamic map" is required because that will allow all remote access vpn to connect to the VPN server. You will use static crypto map if you are configuring LAN-to-LAN VPN tunnel and when the peer address is static.

2/ "ip default-gateway 172.16.186.1" is not required.

3/ The route-map is assigned to the NAT statement. However you can just use ACL assigned to the NAT statement, you don't have to use route-map if you don't want to. The example does not have any NAT configured, that's why the ACL is permit ip any any. If you already have existing NAT statement, you can just deny the VPN server LAN from being NATed when it's going towards the remote server LAN.

[ms_sourav]

Thank you Jennifer..