Cisco OL-4015-08 Guide de l'utilisateur

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

ContentsxCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Easy VPN Remote 77Create Easy VPN Remote 77Configure an Eas

Chapter 4 Edit Interface/ConnectionConnection: ADSL4-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08EncapsulationS

4-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: ADSL• Dynamic IP a

Chapter 4 Edit Interface/ConnectionConnection: ADSL over ISDN4-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• En

4-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: ADSL over ISDNIf y

Chapter 4 Edit Interface/ConnectionConnection: G.SHDSL4-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• auto—Conf

4-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: G.SHDSLEncapsulati

Chapter 4 Edit Interface/ConnectionConnection: G.SHDSL4-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Static IP a

4-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: G.SHDSLAnnex A (U.

Chapter 4 Edit Interface/ConnectionConfigure DSL Controller4-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Config

4-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConfigure DSL ControllerIf you

xiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsGeneral Group Information 111DNS and WINS Configuration 11

Chapter 4 Edit Interface/ConnectionConnection: G.SHDSL with DSL Controller4-34Cisco Router and Security Device Manager Version 2.2 User’s GuideO

4-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: G.SHDSL with DSL C

Chapter 4 Edit Interface/ConnectionConnection: Serial Interface, Frame Relay Encapsulation4-36Cisco Router and Security Device Manager Version 2

4-37Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Serial Interface,

Chapter 4 Edit Interface/ConnectionConnection: Serial Interface, Frame Relay Encapsulation4-38Cisco Router and Security Device Manager Version 2

4-39Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Serial Interface,

Chapter 4 Edit Interface/ConnectionConnection: Serial Interface, PPP Encapsulation4-40Cisco Router and Security Device Manager Version 2.2 User’

4-41Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Serial Interface,

Chapter 4 Edit Interface/ConnectionAdd or Edit GRE Tunnel'4-42Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Th

4-43Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionAdd or Edit GRE Tunnel'Tu

ContentsxiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06DMVPN Network Topology 9Specify Hub Information 10Spoke G

Chapter 4 Edit Interface/ConnectionConnection: ISDN BRI4-44Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Connection

4-45Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: ISDN BRISome servi

Chapter 4 Edit Interface/ConnectionConnection: ISDN BRI4-46Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Subnet Mas

4-47Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Analog ModemConnec

Chapter 4 Edit Interface/ConnectionConnection: Analog Modem4-48Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Subnet

4-49Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: (AUX Backup)Connec

Chapter 4 Edit Interface/ConnectionConnection: (AUX Backup)4-50Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Clear

4-51Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionAuthenticationDynamic DNSEnabl

Chapter 4 Edit Interface/ConnectionSPID Details4-52Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08CHAP authenticatio

4-53Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionDialer OptionsSPID2Enter the S

xiiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsAdd or Edit Transform Set 40IPSec Rules 43Internet Key E

Chapter 4 Edit Interface/ConnectionDialer Options4-54Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Idle timeoutEnte

4-55Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionBackup ConfigurationBackup Con

Chapter 4 Edit Interface/ConnectionBackup Configuration4-56Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Next Hop F

CHAPTER 5-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-085Create Firewall A firewall is a set of rules used to protect th

Chapter 5 Create Firewall5-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Advanced FirewallClick this if you want S

5-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHave SDM help me create an Advanced Firew

Chapter 5 Create FirewallBasic Firewall Configuration Wizard5-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Basic

5-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallAdvanced Firewall Configuration WizardSou

Chapter 5 Create FirewallAdvanced Firewall Configuration Wizard5-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Adv

5-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallAdvanced Firewall Configuration WizardDMZ

ContentsxivCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Enable Password Encryption Service 10Enable TCP Keepalive

Chapter 5 Create FirewallAdvanced Firewall Configuration Wizard5-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08tra

5-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallAdvanced Firewall Configuration WizardApp

Chapter 5 Create FirewallAdvanced Firewall Configuration Wizard5-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Do

5-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...• Apply access rule to the in

Chapter 5 Create FirewallHow Do I...5-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08How Do I View Activity on My

5-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...The Edit a Rule dialog box ap

Chapter 5 Create FirewallHow Do I...5-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08To verify that the connection

5-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...access-list 105 permit udp ho

Chapter 5 Create FirewallHow Do I...5-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08How Do I Modify an Existing F

5-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...How Do I Configure NAT Passth

xvCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsEnable AAA 24Configuration Summary Screen 25SDM and Cisco

Chapter 5 Create FirewallHow Do I...5-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 1 From the left frame, s

5-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...How Do I Associate a Rule wit

Chapter 5 Create FirewallHow Do I...5-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 5 Click in the inbound o

5-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 5 Create FirewallHow Do I...Step 1 If you are at the Insp

Chapter 5 Create FirewallHow Do I...5-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 2 Click Edit Firewall Po

CHAPTER 6-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-086Firewall PolicyThe Firewall Policy feature lets you view and mo

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-083. Come to the Fi

6-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLFrom–Select the i

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Originating Traff

6-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLMake Changes to A

ContentsxviCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Details 8Network Address Translation Rules 8Designate NAT

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Service Area head

6-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLthe Extended entr

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08If you want to ap

6-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLApplications Area

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Global Settings—

6-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLSwap From and To

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Alert ActionOne

6-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLAlert ActionOne

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Audit ActionOne

6-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 6 Firewall PolicyEdit Firewall Policy/ACLTypeOne of the f

xviiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsSignature Import Wizard Summary 41Signatures 42Assign Ac

Chapter 6 Firewall PolicyEdit Firewall Policy/ACL6-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Keep inspectio

CHAPTER 7-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-087Application SecurityApplication Security allows you to create

Chapter 7 Application SecurityApplication Security Windows7-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Assoc

7-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityNo Application Security PolicyNo Ap

Chapter 7 Application SecurityE-mail7-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08E-mailSpecify the e-mail appl

7-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityHTTPResetResets the TCP connection

Chapter 7 Application SecurityHTTP7-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Set maximum URI length inspecti

7-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityHTTPHeader OptionsYou can have the

Chapter 7 Application SecurityHTTP7-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Click Permit, Block, and Alarm

7-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityInstant Messaginggzip checkboxThe e

ContentsxviiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Edit QoS Policy 13Edit QoS Class 15Add a Protocol 17Int

Chapter 7 Application SecurityApplications/Protocols7-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Applications/

7-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityGlobal Timeouts and ThresholdsOptio

Chapter 7 Application SecurityGlobal Timeouts and Thresholds7-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08TCP F

7-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityGlobal Timeouts and ThresholdsTCP M

Chapter 7 Application SecurityGlobal Timeouts and Thresholds7-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Edit

7-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 7 Application SecurityGlobal Timeouts and ThresholdsMAX D

Chapter 7 Application SecurityGlobal Timeouts and Thresholds7-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 8-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-088Site-to-Site VPNThe help topics in this section describe the S

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Do You Want

8-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNFind out how to

xixCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsRouter Properties 1Device Properties 1Date and Time: Cloc

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Site-to-Site VPN

8-37Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNWhat do you want

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-38Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08VPN Connection I

8-39Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNEnter the pre-sh

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-40Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Details Click th

8-41Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNEncryptionSDM su

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-42Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08HashThe authenti

8-43Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNTo add or edit a

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-44Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08ESP EncryptionTh

8-45Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNWhat Do You Want

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOM

ContentsxxCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06DNS Properties 26Dynamic DNS Methods 26Add or Edit Dynamic

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-46Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08All traffic from

8-47Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNSpoke Configurat

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-48Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• The hash, encr

8-49Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNDetailsClick to

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-50Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Pre-Shared KeyCl

8-51Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNBackup GRE Tunne

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-52Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Routing Informat

8-53Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNCreate Site to Site VPNStatic RoutingSt

Chapter 8 Site-to-Site VPNCreate Site to Site VPN8-54Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Do split tunne

8-55Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN• RIP—Routing Inte

xxiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsRouter Provisioning 33Router Provisioning from USB 33Publ

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-56Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Use this window to

8-57Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPNSequence NumberThe

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-58Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Delete ButtonClick

8-59Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPNStep 2 Select a po

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-60Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Do You Want t

8-61Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPNSecurity Associati

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-62Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Crypto Map Wizard:

8-63Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPNWhat Do You Want t

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-64Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08All traffic from t

8-65Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNEdit Site-to-Site VPNDelete ConnectionU

ContentsxxiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Open Firewall 56Open Firewall Details 57Resetting to Fac

Chapter 8 Site-to-Site VPNEdit Site-to-Site VPN8-66Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DestinationSelect

8-67Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNHow Do I...may be used on the remote ro

Chapter 8 Site-to-Site VPNHow Do I...8-68Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08How Do I Create a VPN to Mor

8-69Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNHow Do I...Step 12 Click Finish.Create

Chapter 8 Site-to-Site VPNHow Do I...8-70Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• If you entered the same IP

8-71Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNHow Do I...Caution Do not apply the mir

Chapter 8 Site-to-Site VPNHow Do I...8-72Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 7 If you need to modify

8-73Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNHow Do I...If you are viewing IKE SA in

Chapter 8 Site-to-Site VPNHow Do I...8-74Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 1 From the left frame,

8-75Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 8 Site-to-Site VPNHow Do I...How Do I Configure a VPN Aft

xxiiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsFirewall Policy Use Case Scenario 29DMVPN Configuration

Chapter 8 Site-to-Site VPNHow Do I...8-76Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 10 In the IP Address an

CHAPTER 9-77Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-089Easy VPN RemoteCreate Easy VPN RemoteSDM allows you to configu

Chapter 9 Easy VPN RemoteCreate Easy VPN Remote9-78Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Connection Setting

9-79Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteCreate Easy VPN RemoteChoose Network Ext

Chapter 9 Easy VPN RemoteCreate Easy VPN Remote9-80Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08User Authenticatio

9-81Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteCreate Easy VPN RemoteInside InterfacesC

Chapter 9 Easy VPN RemoteCreate Easy VPN Remote9-82Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08With the automatic

9-83Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteID and password to l

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-84Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08NameThe name given t

9-85Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteInside InterfacesThe

ContentsxxivCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Edit Menu Commands 9Preferences 9View Menu Commands 1Hom

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-86Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• The credentials ar

9-87Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN Remote• The XAuth response

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-88Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Connect to an Easy V

9-89Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteAdd or Edit Easy VPN

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-90Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Network Extension—Ch

9-91Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteGroup KeyEnter the I

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-92Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The Cisco Easy VPN R

9-93Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteServersYou can speci

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-94Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Add or Edit Easy VPN

9-95Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteManually enter the u

CHAPTER 1-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-081Home PageThe home page supplies basic information about the rou

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-96Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Please Enter the Use

9-97Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteServersYou can speci

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-98Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08You can enable remot

9-99Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteEdit Easy VPN RemoteEnter the IPSec grou

Chapter 9 Easy VPN RemoteEdit Easy VPN Remote9-100Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The information is

9-101Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteHow Do I...Outside InterfaceChoose the

Chapter 9 Easy VPN RemoteHow Do I...9-102Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08How Do I Edit an Existing Ea

9-103Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 9 Easy VPN RemoteHow Do I...If the ISDN, async, or analo

Chapter 9 Easy VPN RemoteHow Do I...9-104Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 10-105Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0810Easy VPN ServerThe Easy VPN Server feature introduces serve

Chapter 1 Home Page1-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08More...The More... link displays a popup window

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-106Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Create an Ea

10-107Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerIf you choos

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-108Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08User Authent

10-109Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerAdd User Cre

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-110Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08PingPing an

10-111Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerIdle TimerDi

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-112Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Select from

10-113Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerWINSEnter th

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-114Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Enter the Pr

10-115Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerClient Setti

1-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 1 Home PageInterfaces and ConnectionsUp (n): The number of

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-116Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Browser Prox

10-117Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerWhat Do You

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-118Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Browser Prox

10-119Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerUser Authent

Chapter 10 Easy VPN ServerCreate an Easy VPN Server10-120Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Client Updat

10-121Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerCreate an Easy VPN ServerAdd or Edit

Chapter 10 Easy VPN ServerBrowser Proxy Settings10-122Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Test VPN Connec

10-123Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerAdd or Edit Easy VPN ServerExceptions

Chapter 10 Easy VPN ServerAdd or Edit Easy VPN Server10-124Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Interface

10-125Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerAdd or Edit Easy VPN ServerAdd or Edi

Chapter 1 Home Page1-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Interface Firewall Icon NAT Inspection Rule Acc

Chapter 10 Easy VPN ServerGroup Policies Configuration10-126Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Restrict

10-127Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerGroup Policies ConfigurationAdd, Edit

Chapter 10 Easy VPN ServerGroup Policies Configuration10-128Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Details W

10-129Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 10 Easy VPN ServerLocal PoolsThe maximum number of conn

Chapter 10 Easy VPN ServerLocal Pools10-130Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Add or Edit IP Local PoolT

CHAPTER 11-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0811DMVPNThese help topics provide information about Dynamic Mult

Chapter 11 DMVPNDynamic Multipoint VPN11-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08It is important to configur

11-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNDynamic Multipoint VPNSDM’s Configure Spoke featu

Chapter 11 DMVPNDynamic Multipoint VPN11-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Digital CertificatesSelect

11-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNDynamic Multipoint VPNAdvanced ButtonSDM provides

1-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 1 Home PageNote • Some VPN servers or concentrators authen

Chapter 11 DMVPNDynamic Multipoint VPN11-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Tunnel KeyEnter the key to

11-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNDynamic Multipoint VPNIP Address of hub’s mGRE tu

Chapter 11 DMVPNDynamic Multipoint VPN11-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Select an existing OSPF pro

11-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNDynamic Multipoint VPNEdit—Click to edit the data

Chapter 11 DMVPNDynamic Multipoint VPN11-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Fully Meshed NetworkSelect

11-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNDynamic Multipoint VPNRe-register with hub when

Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)11-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08FirewallIf a

11-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)IPSec Profile

Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)11-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08General Panel

11-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)BandwidthEnte

iiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06CONTENTSHome Page 1LAN Wizard 1Ethernet Configuration 2LAN Wizar

Chapter 1 Home Page1-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)11-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Hold TimeEnte

11-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)Destination R

Chapter 11 DMVPNEdit Dynamic Multipoint VPN (DMVPN)11-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08RIP FieldsIf

11-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 11 DMVPNHow Do I Configure a DMVPN Manually?How Do I Con

Chapter 11 DMVPNHow Do I Configure a DMVPN Manually?11-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08To specify t

CHAPTER 12-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0812VPN Global SettingsThese help topics describe the VPN Global

Chapter 12 VPN Global SettingsVPN Global Settings12-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08XAuth TimeoutTh

12-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 12 VPN Global SettingsVPN Global SettingsIPSec Security

Chapter 12 VPN Global SettingsVPN Global Settings12-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08KeepaliveSpecif

12-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 12 VPN Global SettingsVPN Global SettingsVPN Key Encrypt

CHAPTER 2-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-082LAN Wizard The Cisco Router and Security Device Manager (SDM) L

Chapter 12 VPN Global SettingsVPN Global Settings12-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 13-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0813IP SecurityIP Security (IPSec) is a framework of open standa

Chapter 13 IP SecurityIPSec Policies13-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08NameThe name of this IPSec p

13-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityIPSec PoliciesDynamic Crypto Maps Sets in

Chapter 13 IP SecurityIPSec Policies13-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Crypto Maps in this IPSec po

13-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityIPSec PoliciesAdd or Edit Crypto Map: Gene

Chapter 13 IP SecurityIPSec Policies13-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08independently. It thus ensur

13-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityIPSec PoliciesNote A crypto map can contai

Chapter 13 IP SecurityIPSec Policies13-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Add or Edit Crypto Map: IPSe

13-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityDynamic Crypto Map SetsDynamic Crypto Map

Chapter 2 LAN WizardEthernet Configuration2-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Do You Want to Do?Y

Chapter 13 IP SecurityIPSec Profiles13-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Associate Crypto Map with th

13-37Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityTransform SetDeleteClick to edit a selecte

Chapter 13 IP SecurityTransform Set13-38Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08You can create multiple trans

13-39Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityTransform SetESP IntegrityIndicates the in

Chapter 13 IP SecurityTransform Set13-40Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Do You Want to Do?Add or

13-41Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityTransform Set• Easy VPN Servers do not sup

Chapter 13 IP SecurityTransform Set13-42Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• ESP_NULL. Null encryption a

13-43Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 13 IP SecurityIPSec RulesNote Not all routers support IP

Chapter 13 IP SecurityIPSec Rules13-44Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08SourceAn IP address or keyword

CHAPTER 14-45Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0814Internet Key ExchangeThe help topics in this section describ

2-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardLAN Wizard: Select an Interface• A DHCP addres

Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)14-46Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IKE P

14-47Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)HashT

Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)14-48Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Add o

14-49Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)• AES

Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)14-50Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Lifet

14-51Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)Add o

Chapter 14 Internet Key ExchangeInternet Key Exchange (IKE)14-52Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP Ad

CHAPTER 15-53Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0815VPN TroubleshootingSDM can troubleshoot VPN connections that

Chapter 15 VPN TroubleshootingVPN Troubleshooting15-54Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08PeerThe IP addr

15-55Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 15 VPN TroubleshootingVPN Troubleshooting: Specify Easy

Chapter 2 LAN WizardLAN Wizard: Enable DHCP Server2-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08LAN Wizard: Enab

Chapter 15 VPN TroubleshootingVPN Troubleshooting: Generate Traffic15-56Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015

15-57Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 15 VPN TroubleshootingVPN Troubleshooting: Generate GRE

Chapter 15 VPN TroubleshootingSDM Warning: SDM will enable router debugs...15-58Cisco Router and Security Device Manager Version 2.2 User’s Guid

CHAPTER 16-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0816Security AuditSecurity Audit is a feature that examines your

Chapter 16 Security Audit16-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The Welcome page of the Security Audit w

16-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditOne-Step LockdownThis option tests you r

Chapter 16 Security AuditWelcome Page16-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Enable NetFlow Switching•

16-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditReport Card PageOutside ColumnThis colum

Chapter 16 Security AuditFix It Page16-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08you selected, collecting furt

16-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageThe configuration that will b

2-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardDHCP OptionsDHCP OptionsUse this window to con

Chapter 16 Security AuditFix It Page16-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The configuration that will b

16-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageIn addition, the BOOTP servic

Chapter 16 Security AuditFix It Page16-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08This fix can be undone. To l

16-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageEnable TCP Keepalives for In

Chapter 16 Security AuditFix It Page16-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08service sequence-numbersEnab

16-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageThis configuration change wi

Chapter 16 Security AuditFix It Page16-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08connections, this can overwh

16-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It Pagelogging console criticallogg

Chapter 16 Security AuditFix It Page16-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The configuration that will

16-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageSet UsersSecurity Audit secu

Chapter 2 LAN WizardLAN Wizard: VLAN Mode2-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08LAN Wizard: VLAN ModeThis

Chapter 16 Security AuditFix It Page16-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08NetFlow identifies flows of

16-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It PageThe configuration that will

Chapter 16 Security AuditFix It Page16-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Disable MOP ServiceSecurity

16-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It Pagein the internetwork. ICMP ma

Chapter 16 Security AuditFix It Page16-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Enable Unicast RPF on Outsid

16-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditFix It Pagedestination addresses. Witho

Chapter 16 Security AuditFix It Page16-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08access-class <std-acl-num

16-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditConfiguration Summary Screen• Configure

Chapter 16 Security AuditSDM and Cisco IOS AutoSecure16-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Disable I

16-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditSecurity Configurations SDM Can Undo• C

2-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardIRB BridgeInclude this VLAN in an IRB bridge t

Chapter 16 Security AuditUndoing Security Audit Fixes16-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Undoing Sec

16-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditConfigure User Accounts for Telnet/SSH

Chapter 16 Security AuditEnable Secret and Banner Page16-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Delete But

16-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 16 Security AuditLogging PageLogging PageThis screen let

Chapter 16 Security AuditLogging Page16-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Immediate action needed–2 -

CHAPTER 17-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0817RoutingThe Routing window displays the configured static rout

Chapter 17 Routing17-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Do You Want To Do?Note • If SDM detects a

17-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 17 RoutingAdd or Edit IP Static RouteItem ValueThis colum

Chapter 17 RoutingAdd or Edit IP Static Route17-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08PrefixEnter the IP a

17-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 17 RoutingAdd or Edit an RIP RouteAdd or Edit an RIP Rout

Chapter 2 LAN WizardDHCP Pool for BVI2-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP AddressEnter the IP addres

Chapter 17 RoutingAdd or Edit an OSPF Route17-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP Network ListEnter t

17-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 17 RoutingAdd or Edit EIGRP RouteAdd or Edit EIGRP RouteU

Chapter 17 RoutingAdd or Edit EIGRP Route17-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 18-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0818Network Address TranslationNetwork Address Translation (NAT)

Chapter 18 Network Address TranslationNetwork Address Translation Wizards18-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL

18-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translation

Chapter 18 Network Address TranslationNetwork Address Translation Wizards18-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL

18-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translation

Chapter 18 Network Address TranslationNetwork Address Translation Wizards18-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL

18-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translation

2-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardIRB for EthernetIRB for EthernetIf your router

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4

18-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translation

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

ContentsivCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06How Do I View the IOS Commands I Am Sending to the Router?

Chapter 2 LAN WizardSummary2-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Configure Switch Device ModuleIf you a

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

Chapter 18 Network Address TranslationNetwork Address Translation Rules18-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-

18-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationNetwork Address Translatio

2-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardHow Do I...Step 1 From the category bar, clic

Chapter 18 Network Address TranslationHow Do I . . .18-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08TypeSelect I

18-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 18 Network Address TranslationHow Do I . . .• Add or Edi

Chapter 18 Network Address TranslationHow Do I . . .18-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 19-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0819Intrusion Prevention SystemIOS Intrusion Prevention System (

Chapter 19 Intrusion Prevention SystemIPS Rules19-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Global Settings D

19-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemIPS Rules• The location of

Chapter 19 Intrusion Prevention SystemIPS Rules19-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Use the Add, Dele

19-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemIPS RulesEnable ButtonClic

Chapter 19 Intrusion Prevention SystemIPS Rules19-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Unnumbered—The

19-37Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemIPS RulesSource/Destinatio

Chapter 2 LAN WizardHow Do I...2-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 5 Click Start Monitoring to s

Chapter 19 Intrusion Prevention SystemImport Signatures19-38Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Outbound

19-39Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport SignaturesNote Befo

Chapter 19 Intrusion Prevention SystemImport Signatures19-40Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Welcome t

19-41Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport SignaturesMatch all

Chapter 19 Intrusion Prevention SystemImport Signatures19-42Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Signature

19-43Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport SignaturesEditClick

Chapter 19 Intrusion Prevention SystemImport Signatures19-44Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08SDFs are

19-45Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport SignaturesIconsRigh

Chapter 19 Intrusion Prevention SystemImport Signatures19-46Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Apply Cha

19-47Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport SignaturesSignature

2-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 2 LAN WizardHow Do I...The next time you use a wizard to

Chapter 19 Intrusion Prevention SystemImport Signatures19-48Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Add, Edit

19-49Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemImport Signatures• SigVers

Chapter 19 Intrusion Prevention SystemImport Signatures19-50Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08AutosaveC

19-51Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemGlobal SettingsDetermine W

Chapter 19 Intrusion Prevention SystemGlobal Settings19-52Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Notificatio

19-53Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemGlobal SettingsDelete Butt

Chapter 19 Intrusion Prevention SystemSDEE Messages19-54Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Enable Deny A

19-55Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 19 Intrusion Prevention SystemSDEE MessagesDescriptionAv

Chapter 19 Intrusion Prevention SystemSDEE Messages19-56Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IDS error mes

CHAPTER 20-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0820Network Module ManagementIf the router has network modules th

Chapter 2 LAN WizardHow Do I...2-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

Chapter 20 Network Module ManagementIDS Network Module Management20-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

20-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 20 Network Module ManagementIDS Network Module Management

Chapter 20 Network Module ManagementIDS Network Module Management20-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

20-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 20 Network Module ManagementIDS Network Module Management

Chapter 20 Network Module ManagementIDS Network Module Management20-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

20-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 20 Network Module ManagementNetwork Module LoginIDS NM In

Chapter 20 Network Module ManagementSwitch Module Interface Selection20-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-401

CHAPTER 21-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0821Quality of ServiceThe Quality of Service (QoS) Wizard allows

Chapter 21 Quality of ServiceQoS Wizard21-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08QoS WizardNextClick the N

21-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 21 Quality of ServiceQoS Policy GenerationBandwidth Allo

CHAPTER 3-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-083Create Connection WizardsThe Create Connection wizards let you

Chapter 21 Quality of ServiceQoS Policy Generation21-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08View QoS Class

21-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 21 Quality of ServiceSummary of the configurationSummary

Chapter 21 Quality of ServiceEdit QoS Policy21-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP AddressThe IP add

21-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 21 Quality of ServiceEdit QoS PolicyQueuingThis column l

Chapter 21 Quality of ServiceEdit QoS Policy21-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08AddClick this button

21-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 21 Quality of ServiceEdit QoS PolicyAdd a ProtocolThis w

Chapter 21 Quality of ServiceQoS Status21-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Interface AssociationThis

21-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 21 Quality of ServiceQoS StatusBandwidth utilization is

Chapter 21 Quality of ServiceQoS Status21-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08StatisticsSelect one of t

CHAPTER 22-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0822Network Admission ControlNetwork Admission Control (NAC) red

Chapter 3 Create Connection WizardsWAN Wizard Interface Welcome Window3-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-401

Chapter 22 Network Admission ControlCreate NAC Tab22-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The NAC config

22-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlCreate NAC TabWelcomeThe NAC

Chapter 22 Network Admission ControlCreate NAC Tab22-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Select the int

22-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlCreate NAC TabAdd, Edit, and

Chapter 22 Network Admission ControlCreate NAC Tab22-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP Address/MAC

22-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlCreate NAC TabPolicy ListSel

Chapter 22 Network Admission ControlCreate NAC Tab22-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Access Rule Fi

22-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlCreate NAC TabNAC Router Man

Chapter 22 Network Admission ControlCreate NAC Tab22-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Details Window

22-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlEdit NAC TabEdit NAC TabThe

3-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsISDN Wizard Welcome WindowISDN

Chapter 22 Network Admission ControlEdit NAC Tab22-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Exception List W

22-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlEdit NAC TabAdd, Edit, and D

Chapter 22 Network Admission ControlEdit NAC Tab22-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Revalidation Tim

22-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 22 Network Admission ControlHow Do I...The access rule m

Chapter 22 Network Admission ControlHow Do I...22-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08http://www.cisco.

CHAPTER 23-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0823Router PropertiesRouter properties let you define the overall

Chapter 23 Router PropertiesDate and Time: Clock Properties23-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Enter

23-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDate and Time: Clock PropertiesDate/T

Chapter 23 Router PropertiesDate and Time: Clock Properties23-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Note Y

23-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDate and Time: Clock PropertiesIP Add

Chapter 3 Create Connection WizardsSelect Interface3-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Select Interfac

Chapter 23 Router PropertiesDate and Time: Clock Properties23-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Prefer

23-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDate and Time: Clock PropertiesSNTPTh

Chapter 23 Router PropertiesDate and Time: Clock Properties23-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Note A

23-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDate and Time: Clock PropertiesEnable

Chapter 23 Router PropertiesRouter Access23-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Router AccessThis windo

23-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesRouter AccessWhat Do You Want To Do?

Chapter 23 Router PropertiesRouter Access23-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Note Protocols that req

23-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesVTYsDetailsThe Associate a View for

Chapter 23 Router PropertiesVTYs23-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Authentication Policy—The AAA

23-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesVTYsSSHCheck this check box to enabl

3-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsIP Address: ATM with RFC 1483 R

Chapter 23 Router PropertiesVTYs23-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Host/NetworkA network address or

23-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesVTYsEdit ButtonClick to edit a manag

Chapter 23 Router PropertiesVTYs23-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Management ProtocolsSpecify the

23-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesVTYscan create a security risk becau

Chapter 23 Router PropertiesVTYs23-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08SSHThis router implements Secure

23-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDHCP ConfigurationDHCP Configuration

Chapter 23 Router PropertiesDHCP Configuration23-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08AddSelect this opt

23-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDHCP ConfigurationSubnet MaskEnter t

Chapter 23 Router PropertiesDHCP Configuration23-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Host/IP MaskThe IP

23-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDHCP ConfigurationNameEnter the name

vCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsDelete Connection 19Summary 21Connectivity testing and tro

Chapter 3 Create Connection WizardsIP Address: Ethernet without PPPoE3-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015

Chapter 23 Router PropertiesDNS Properties23-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DNS PropertiesThe Doma

23-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 23 Router PropertiesDynamic DNS MethodsEdit ButtonTo edi

Chapter 23 Router PropertiesDynamic DNS Methods23-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IETFIETF is a dyn

CHAPTER 24-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0824ACL EditorRules define how the router will respond to a parti

Chapter 24 ACL EditorUseful Procedures for Access Rules and Firewalls24-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-401

24-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules Windows• How Do I Modify an Existing F

Chapter 24 ACL EditorRules Windows24-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The upper portion of the screen

24-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsAccess rules can be either stan

Chapter 24 ACL EditorRules Windows24-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DestinationFor extended rules,

24-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsAdd or Edit a RuleThis window l

3-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsIP Address: Serial with HDLC or

Chapter 24 ACL EditorRules Windows24-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Rule Entry ListThis list shows

24-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsWhat do you want to do?Associat

Chapter 24 ACL EditorRules Windows24-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Select an InterfaceSelect the

24-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsWhat do you want to do?Add a S

Chapter 24 ACL EditorRules Windows24-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Note Any traffic that does not

24-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsMaskIf you selected A Network

Chapter 24 ACL EditorRules Windows24-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What Permit and Deny do depend

24-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsTypeSelect one of the followin

Chapter 24 ACL EditorRules Windows24-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08See Services and Ports to see

24-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 24 ACL EditorRules WindowsRule CategorySelect the rule c

Chapter 3 Create Connection WizardsIP Address: ISDN BRI or Analog Modem3-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-40

Chapter 24 ACL EditorRules Windows24-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DestinationFor extended rules,

CHAPTER 25-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0825Port-to-Application MappingPort-to-Application Mapping (PAM)

Chapter 25 Port-to-Application MappingPort-to-Application Mappings25-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-

25-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 25 Port-to-Application MappingPort-to-Application Mappin

Chapter 25 Port-to-Application MappingPort-to-Application Mappings25-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-

CHAPTER 26-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0826Authentication, Authorization, and AccountingCisco IOS Authe

Chapter 26 Authentication, Authorization, and AccountingAAA Servers and Groups26-24Cisco Router and Security Device Manager Version 2.2 User’s G

26-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 26 Authentication, Authorization, and AccountingAAA Serv

Chapter 26 Authentication, Authorization, and AccountingAAA Servers and Groups26-26Cisco Router and Security Device Manager Version 2.2 User’s G

26-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 26 Authentication, Authorization, and AccountingAAA Serv

3-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsAuthenticationAuthenticationThi

Chapter 26 Authentication, Authorization, and AccountingAAA Servers and Groups26-28Cisco Router and Security Device Manager Version 2.2 User’s G

26-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 26 Authentication, Authorization, and AccountingAAA Serv

Chapter 26 Authentication, Authorization, and AccountingAAA Servers and Groups26-30Cisco Router and Security Device Manager Version 2.2 User’s G

26-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 26 Authentication, Authorization, and AccountingAAA Serv

Chapter 26 Authentication, Authorization, and AccountingAAA Servers and Groups26-32Cisco Router and Security Device Manager Version 2.2 User’s G

CHAPTER 27-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0827Router ProvisioningThis window tells you if SDM has detected

Chapter 27 Router ProvisioningRouter Provisioning from USB27-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 5

CHAPTER 28-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0828Public Key InfrastructureThe Public Key Infrastructure (PKI)

Chapter 28 Public Key InfrastructureCertificate Wizards28-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• NTP not

28-37Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureCertificate WizardsNote SDM

Chapter 3 Create Connection WizardsSwitch Type and SPIDs3-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08ISDN Swit

Chapter 28 Public Key InfrastructureCertificate Wizards28-38Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Note The

28-39Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureCertificate WizardsAdvanced

Chapter 28 Public Key InfrastructureCertificate Wizards28-40Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Include r

28-41Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureRSA KeysState (st)Enter the

Chapter 28 Public Key InfrastructureSummary28-42Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The modulus determine

28-43Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureEnrollment StatusIf you are

Chapter 28 Public Key InfrastructureEnrollment Request28-44Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Begin New

28-45Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureImport CA certificateImport

Chapter 28 Public Key InfrastructureImport Router Certificate(s)28-46Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

28-47Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureDigital CertificatesEdit But

3-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsDial StringA SPID is usually a

Chapter 28 Public Key InfrastructureDigital Certificates28-48Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Refresh

28-49Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureDigital CertificatesRevocati

Chapter 28 Public Key InfrastructureRSA Keys Window28-50Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Best Effort

28-51Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureRSA Keys WindowKey DataClick

Chapter 28 Public Key InfrastructureUSB Tokens28-52Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Save to USB TokenC

28-53Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureUSB TokensMaximum PIN Retrie

Chapter 28 Public Key InfrastructureUSB Tokens28-54Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Current PINIf you

28-55Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureSDP Troubleshooting TipsSDP

Chapter 28 Public Key InfrastructureOpen Firewall28-56Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Open FirewallTh

28-57Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 28 Public Key InfrastructureOpen FirewallDetails ButtonC

Chapter 3 Create Connection WizardsBackup Configuration3-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Backup Con

Chapter 28 Public Key InfrastructureOpen Firewall28-58Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 29-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0829Resetting to Factory DefaultsYou can reset the configuration

Chapter 29 Resetting to Factory Defaults29-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The process for giving th

29-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 29 Resetting to Factory DefaultsSpecify an IP address. En

Chapter 29 Resetting to Factory DefaultsThis Feature Not Supported29-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0

CHAPTER 30-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0830More About...These topics provide more information about sub

Chapter 30 More About...IP Addresses and Subnet Masks30-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The subnet

30-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...IP Addresses and Subnet MasksWhen a netw

Chapter 30 More About...Available Interface Configurations30-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP Add

30-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...DHCP Address PoolsDHCP Address PoolsThe

3-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsAdvanced OptionsAdvanced Optio

Chapter 30 More About...Meanings of the Permit and Deny Keywords30-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

30-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Services and Ports• IP Services• Service

Chapter 30 More About...Services and Ports30-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08UDP Serviceslpd 515 Li

30-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Services and Portsnetbios-ns 137 NetBios

Chapter 30 More About...Services and Ports30-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08ICMP Message TypesICM

30-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Services and PortsIP Servicestimestamp-

Chapter 30 More About...Services and Ports30-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Services That Can Be

30-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About NATMore About NATThis sectio

Chapter 30 More About...More About NAT30-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Scenario 2You need to map

30-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About NATResultThe source address

Chapter 3 Create Connection WizardsEncapsulation3-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08AutodetectClick A

Chapter 30 More About...More About NAT30-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Dynamic Address Translati

30-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About NATScenario 2You want the ho

Chapter 30 More About...More About VPN30-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• The inside source stati

30-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About VPN• Security and VPN Device

Chapter 30 More About...More About VPN30-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08A router interface can be

30-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About VPNMore About IKEIKE handles

Chapter 30 More About...More About VPN30-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08–Encryption Algorithm: DE

30-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...More About VPNAllowable Transform Combi

Chapter 30 More About...Reasons Why a Serial Interface or Subinterface Configuration May Be Read-Only30-24Cisco Router and Security Device Mana

30-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Reasons Why an ATM Interface or Subinte

3-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsPVCThe encapsulations availabl

Chapter 30 More About...Reasons Why an Ethernet Interface Configuration May Be Read-Only30-26Cisco Router and Security Device Manager Version 2

30-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Reasons Why an ISDN BRI Interface Confi

Chapter 30 More About...Reasons Why an Analog Modem Interface Configuration May Be Read-Only30-28Cisco Router and Security Device Manager Versi

30-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Firewall Policy Use Case Scenario–track

Chapter 30 More About...Firewall Policy Use Case Scenario30-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Examin

30-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...Firewall Policy Use Case ScenarioThese

Chapter 30 More About...DMVPN Configuration Recommendations30-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The

30-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 30 More About...DMVPN Configuration RecommendationsAssi

Chapter 30 More About...SDM White Papers30-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Ping the Hub Before You

CHAPTER 31-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0831Getting StartedCisco Router and Security Device Manager (SDM)

ContentsviCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06Add or Edit BVI Interface 18Add Loopback Interface/Connect

Chapter 3 Create Connection WizardsConfigure LMI and DLCI3-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08VCIEnter

Chapter 31 Getting StartedWhat’s New in this Release?31-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08What’s New i

CHAPTER 32-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0832Viewing Router InformationThe Cisco Router and Security Devic

Chapter 32 Viewing Router InformationOverview32-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08OverviewThe Monitor

32-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationOverviewResource StatusShows

Chapter 32 Viewing Router InformationOverview32-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Bandwidth UsageThe p

32-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationOverviewNo. of DMVPN Clients

Chapter 32 Viewing Router InformationInterface Status32-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Informationa

32-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationInterface Status• Bandwidth

Chapter 32 Viewing Router InformationVPN Status32-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Real-time data e

32-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationVPN Status• IPSec Tunnels• D

3-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsConfigure Clock SettingsDLCIEn

Chapter 32 Viewing Router InformationVPN Status32-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The number of err

32-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationVPN StatusResets statistics

Chapter 32 Viewing Router InformationVPN Status32-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08• Public IP addre

32-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationFirewall Status–MM_KEY_EXCH

Chapter 32 Viewing Router InformationFirewall Status32-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Number of At

32-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationNAC Status*Jun 27 11:42:01.

Chapter 32 Viewing Router InformationNAC Status32-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Clicking on an in

32-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationLoggingLoggingThe router co

Chapter 32 Viewing Router InformationLogging32-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Shows the severity o

32-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 32 Viewing Router InformationLogging

Chapter 3 Create Connection WizardsConfigure Clock Settings3-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08T1 Fra

Chapter 32 Viewing Router InformationLogging32-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 33-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0833File Menu CommandsThe following options are available from th

Chapter 33 File Menu CommandsWrite to Startup Config33-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08CancelClick t

33-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 33 File Menu CommandsFile ManagementYou can choose a file

Chapter 33 File Menu CommandsFile Management33-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Paste ButtonAfter you

33-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 33 File Menu CommandsSave SDF to PCNew FolderThis window

Chapter 33 File Menu CommandsUnable to perform ‘squeeze flash’33-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Not

33-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 33 File Menu CommandsUnable to perform ‘squeeze flash’Ste

Chapter 33 File Menu CommandsUnable to perform ‘squeeze flash’33-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 34-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0834Edit Menu CommandsThe following options are available from th

3-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsDelete ConnectionLine Build Ou

Chapter 34 Edit Menu CommandsPreferences34-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Continue monitoring inte

CHAPTER 35-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0835View Menu CommandsThe following options are available from th

Chapter 35 View Menu CommandsRunning Config35-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Running ConfigDisplays

35-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 35 View Menu CommandsRefreshAccess RulesShows all of the

Chapter 35 View Menu CommandsRefresh35-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 36-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0836Tools Menu CommandsThe following options are available from t

Chapter 36 Tools Menu CommandsUSB Token PIN Settings36-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08USB Token PIN

36-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 36 Tools Menu CommandsUpdate SDMSave the New PIN to Route

Chapter 36 Tools Menu CommandsUpdate SDM36-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08If there is more than one

36-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 36 Tools Menu CommandsUpdate SDMUpdate SDM from CDIf you

Chapter 3 Create Connection WizardsDelete Connection3-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08To view the a

Chapter 36 Tools Menu CommandsUpdate SDM36-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 37-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0837Help Menu CommandsThe following options are available from th

Chapter 37 Help Menu CommandsAbout SDM37-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

GL-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GLOSSARYSymbols and Numerics3DESTriple DES. An encryption algorithm th

GlossaryGL-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08address translationThe translation of a network address and/or

GL-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossaryasymmetric encryptionAlso called public key systems, this appr

GlossaryGL-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08CA certificateA digital certificate granted to one certificati

GL-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryCHAPChallenge Handshake Authentication Protocol. Security feat

GlossaryGL-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08cookieA cookie is a web browser feature which stores or retrie

GL-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryDES Data Encryption Standard. Standard cryptographic algorithm

3-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsSummary• Crypto—A crypto map i

GlossaryGL-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DMVPNDynamic multipoint virtual private network. A virtual pri

GL-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryEEAPoUDPExtensible Authentication Protocol over User Datagram

GlossaryGL-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08ESPEncapsulating Security Payload. An IPSec protocol that pro

GL-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossaryextended rulesA type of Access rule. Extended rules extended

GlossaryGL-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Gglobal IKE policyAn IKE policy that is global to a device, r

GL-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryheadendThe upstream, transmit end of a tunnel.HMACHash-based

GlossaryGL-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IDS SensorAn IDS sensor is hardware on with the Cisco IDS run

GL-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryinterfaceThe physical connection between a particular network

GlossaryGL-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IPSecA framework of open standards that provides data confide

GL-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossarykey pairSee public key encryption.key recoveryA trusted metho

Chapter 3 Create Connection WizardsConnectivity testing and troubleshooting3-22Cisco Router and Security Device Manager Version 2.2 User’s Guide

GlossaryGL-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08logical interfaceAn interface that has been created solely by

GL-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryMD5Message Digest 5. A one-way hashing function that produces

GlossaryGL-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08NADNetwork Access Device. In a NAC implementation, the device

GL-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryNHRPNext Hop Resolution protocol. A client and server protoco

GlossaryGL-22Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08PPADpacket assembler/disassembler. Device used to connect sim

GL-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossaryphysical interfaceA router interface supported by a network m

GlossaryGL-24Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08PPTPPoint-to-Point Tunneling Protocol. Creates client-initiat

GL-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossarypublic key encryptionIn public key encryption systems, every

GlossaryGL-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08remote subnetSubnetworks are IP networks arbitrarily segmente

GL-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossaryroute mapRoute maps enable you to control information that is

3-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsConnectivity testing and troub

GlossaryGL-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08SSAsecurity association. A set of security parameters agreed

GL-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossarySHA-1Secure Hashing Algorithm 1. Algorithm that takes a messa

GlossaryGL-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08spoofingspoofThe act of a packet illegally claiming to be fro

GL-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Glossarysubnet, subnetworkIn IP networks, a network sharing a particu

GlossaryGL-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08traffic flow confidentiality or traffic analysisSecurity conc

GL-33Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryVFRVirtual Fragment Reassembly. VFR enables IOS Firewall to d

GlossaryGL-34Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08VPN mirror policyA VPN policy on a remote system that contain

GL-35Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GlossaryXX.509A digital certificate standard, specifying certificate

GlossaryGL-36Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

IN-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08INDEXSymbols$ETH-LAN$ 1$ETH-WAN$ 4Numerics3DES 41AAbout SDMSDM version

Chapter 3 Create Connection WizardsConnectivity testing and troubleshooting3-24Cisco Router and Security Device Manager Version 2.2 User’s Guide

IndexIN-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08CEF, enabling 12Challenge Handshake Authentication Protocol, see

IN-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IndexIPSec group key 79IPSec group name 79manual tunnel control 81, 10

IndexIN-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08GRE over IPSec tunnel 48GRE tunnel 48pre-shared key 50split tunne

IN-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Indexstatistics 9tunnel status 9viewing activity 8IPSec Rules window 3

IndexIN-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08translation timeouts 9, 12UDP flow timeouts 13Wizard 1NAT Rules w

IN-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Indexdistance metric 4EIGRP route 7OSPF route 5passive interface 5, 6,

IndexIN-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08TTCP keep-alive message, enabling 11TCP small servers, disabling

IN-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Indexpermitting traffic through a firewall to 17vty linesconfiguring a

IndexIN-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

3-25Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsConnectivity testing and troub

viiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsAdvanced Firewall Interface Configuration 5Advanced Firew

Chapter 3 Create Connection WizardsHow Do I...3-26Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08How Do I...This sec

3-27Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsHow Do I...How Do I View Activ

Chapter 3 Create Connection WizardsHow Do I...3-28Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08The interface is ad

3-29Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsHow Do I...The Dynamic Routing

Chapter 3 Create Connection WizardsHow Do I...3-30Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Step 4 Click Edit.T

3-31Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 3 Create Connection WizardsHow Do I...Step 3 Select the r

Chapter 3 Create Connection WizardsHow Do I...3-32Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08

CHAPTER 4-1Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-084Edit Interface/ConnectionThis window displays the router’s inte

Chapter 4 Edit Interface/Connection4-2Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DeleteSelecting a connection an

4-3Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionIf SDM is running on a Cisco 70

ContentsviiiCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06SDM Warning: Inspection Rule 15SDM Warning: Firewall 16A

Chapter 4 Edit Interface/Connection4-4Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Item NameThe name of the config

4-5Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionWhy Are Some Interfaces or Conn

Chapter 4 Edit Interface/ConnectionConnection: Ethernet for IRB4-6Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Con

4-7Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Ethernet for Routin

Chapter 4 Edit Interface/ConnectionConnection: Ethernet for Routing4-8Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-0

4-9Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Ethernet for Routin

Chapter 4 Edit Interface/ConnectionWireless4-10Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08WirelessIf the router

4-11Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionAssociationWhen a rule is appl

Chapter 4 Edit Interface/ConnectionNAT4-12Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08is Serial0/0, you would fir

4-13Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionGeneralMode GroupChoose the ty

ixCisco Router and Security Device Manager (SDM) Version 2.1 User’s GuideOL-4015-06ContentsVPN Authentication Information 49Backup GRE Tunnel Informa

Chapter 4 Edit Interface/ConnectionGeneral4-14Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08DescriptionYou can ente

4-15Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionQoSIP Route Cache-FlowThis opt

Chapter 4 Edit Interface/ConnectionSelect Ethernet Configuration Type4-16Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-401

4-17Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: SubinterfacesVLAN

Chapter 4 Edit Interface/ConnectionAdd or Edit BVI Interface4-18Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08In th

4-19Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: Ethernet LANStatic

Chapter 4 Edit Interface/ConnectionConnection: Ethernet WAN4-20Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08IP Add

4-21Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionEthernet PropertiesAuthenticat

Chapter 4 Edit Interface/ConnectionConnection: Ethernet with No Encapsulation4-22Cisco Router and Security Device Manager Version 2.2 User’s Gui

4-23Cisco Router and Security Device Manager Version 2.2 User’s GuideOL-4015-08Chapter 4 Edit Interface/ConnectionConnection: ADSL• Dynamic IP a