Cisco Cisco ISA550 Integrated Security Appliance 快速安装指南

Cisco

1

Application Note

Configuring VPN with Cisco ISA500 Series Security
Appliances

This application note describes configurations of VPN on the Cisco ISA500 series security
appliance. This document includes the following sections:

•

Supported VPN on the Cisco ISA500 Security Appliance, page 2

•

Restricting Remote VPN Clients to Access Only Specific Networks and Servers,
page 4

•

Permitting Users to Remotely Connect to VPN, page 6

•

Authenticating VPN Users Through RADIUS and Active Directory, page 6

•

Setting Up Split Tunneling with EzVPN and SSLVPN, page 7

•

Configuration Examples of EzVPN, SSLVPN and Site-to-Site Between Cisco ISA500
Appliances, page 9

•

Configuring the Cisco ISA500 Security Appliance for Site-to-Site When the Networks
Overlap, page 36

•

Configuring Split DNS, page 43

•

Configuring Split DNS in a Site-to-Site Setup, page 45

•

Configuring Redundant VPN, page 45

•

Checking the Status of VPN Tunnels, page 47

•

Using the VPN Passthrough Feature, page 48

•

Using the VPN Passthrough Feature, page 48

•

Setting Up Firewall Policies for VPN Zones, page 48

•

Troubleshooting IPsec Tunnel Setup, page 49

•

For More Information, page 52