IPSec Group Policies

[flokki123]

Hi all,

what is it with "Group Policies" when configuring an IPsec tunnel?

Do I need them? Are those optional?

Read some Cisco documentation about it but still dont really understand them…..

"The connection profile uses a group policy that sets terms for user connections after the tunnel is established"

Does that mean a "Group Policy" is not needed for the actual connection set up?

Thanks for any help in advance!

Florian

[Rob Ingram · Accepted solution]

Hi,
Yes you need a group policy to establish a connection, at a minimum you need the group policy to specify the protocol required to be used for the IPSec tunnel. e.g.

group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev2

You could use the same group policy (DfltGrpPolicy) for all VPN tunnels, so therefore you do not need to create a new one everytime.

HTH