Cisco Cisco ASR 5500

Cisco

Cisco Security Gateway Administration Guide ▄

iii

CONTENTS

About this Guide ................................................................................................. v

Conventions Used ....................................................................................................................................vi

Documents and Resources ..................................................................................................................... vii

Related Common Documentation ....................................................................................................... vii

ASR 9000 Documentation ................................................................................................................... vii

Obtaining Cisco Documentation .......................................................................................................... vii

Contacting Customer Support ................................................................................................................ viii

Security Gateway (SecGW) Overview ............................................................... 9

Product Overview ................................................................................................................................... 10

ASR 9000 VSM .................................................................................................................................. 10

QvPC-SI ............................................................................................................................................. 11

SecGW Application ............................................................................................................................ 12

Network Deployment .............................................................................................................................. 13

Remote Access Tunnels .................................................................................................................... 13

Site-to-Site Tunnels ............................................................................................................................ 13

Packet Flow ............................................................................................................................................ 14

Supported Standards .............................................................................................................................. 16

SecGW Service Creation .................................................................................. 17

Prerequisites ........................................................................................................................................... 18

QvPC-SI Installation ........................................................................................................................... 18

Network Interfaces ............................................................................................................................. 18

SecGW Configuration Sequence ........................................................................................................... 18

Crypto Templates ................................................................................................................................... 19

Access Control Lists ............................................................................................................................... 21

WSG Service Configuration.................................................................................................................... 22

WSG Service ...................................................................................................................................... 22

Bind Address and Crypto Template ............................................................................................... 22

Deployment Mode .......................................................................................................................... 22

Access List ..................................................................................................................................... 23

Pre-fragment MTU ......................................................................................................................... 23

Characteristics and Limitations ...................................................................................................... 23

Lookup Priority ................................................................................................................................... 24

show Commands ................................................................................................................................ 24

show wsg-lookup ........................................................................................................................... 24

show wsg-service ........................................................................................................................... 24

oneP Communication ....................................................................................... 27

Overview ................................................................................................................................................. 28

Connected Apps Sessions ..................................................................................................................... 29

Enabling oneP on ASR 9000 RSP ..................................................................................................... 29

Configuring a Client CA Session ........................................................................................................ 29

Activating a Client Connected Apps Session ..................................................................................... 30

show connectedapps Command ............................................................................................................ 30