Table A-1 Navigation Map for Configuration Tasks
VPN 3000 Task
|
Topic
|
ASDM Path
|
Using the VPN 3000 Management application
|
Not applicable
|
ASDM Online Help > About Cisco ASDM
|
Configuring Interfaces
|
Not applicable
|
Configuration > Interfaces > Add
|
power
|
Enable Interface/Dedicate to management only
|
Ethernet
|
Hardware Port
|
General parameters
|
VLAN ID/Sub-interface ID
|
Configuring Servers
|
AAA Servers
|
Configuration > Properties > AAA Setup > AAA Server Groups
|
authentication, authorization, and accounting
|
Configuration > Security Policy > AAA Rules
|
DHCP
|
Configuration > Properties > DHCP Services > DHCP Server and DHCP Relay
|
DNS
|
Configuration > Properties > DNS Client and Dynamic DNS
|
NTP
|
Configuration > Properties > Device Administration > NTP
|
External servers (TACACS and RADIUS)
|
Configuration > Properties > AAA Setup > AAA Server Groups > Add AAA Server Group (Protocol list box)
|
Configuring Address Management
|
Not applicable
|
Configuration > VPN > IP Address Management
|
Assignment
|
Assignment
|
Pools
|
IP Pools
|
Configuring Tunneling and IPSec
|
PPTP
|
Not applicable
|
IPSec site-to-site
|
Configuration > VPN > IPSec and Configuration > VPN > General > Tunnel Group, Group Policy
|
IKE proposals
|
Configuration > VPN > IKE > Policies
|
NAT-Transparency
|
Configuration > VPN > IKE > Global Parameters (NAT Transparency group box)
Configuration > VPN > IPsec > IPSec Rules > Tunnel Policy (Crypto Map) - Advanced Tab > Enable NAT-T checkbox
|
Alerts
|
Configuration > VPN > IKE > Global Parameters
|
Configuring IP Routing
|
Not applicable
|
Configuration > Routing
|
Static routes
|
Configuration > Routing > Static Route
|
Default gateways ("Tunnel Default Gateway")
|
Configuration > Routing > Static Route
|
OSPF
|
Configuration > Routing > Dynamic Routing > OSPF
|
DHCP
|
Configuration > Properties > DHCP Services
|
Redundancy
|
Configuration > Properties > High Availability, Failover
|
RIP
|
Configuration > Routing > Dynamic Routing > RIP
|
RRI
|
Configuration > VPN > IPsec > IPSec Rules > Tunnel Policy (Crypto Map) - Advanced Tab > Enable Reverse Route Injection checkbox
|
Configuring Management Protocols
|
Not applicable
|
Not applicable
|
FTP
|
Tools > File Management > File Transfer
|
HTTP/HTTPS
|
Configuration > Properties > HTTP/HTTPS
|
TFTP
|
Configuration > Properties > Device Administration > TFTP Server
|
Telnet
|
Configuration > Properties > Device Access > Telnet
|
SNMP
|
Configuration > Properties > Device Administration> SNMP
|
SSL
|
Configuration > Properties > SSL
|
SSH
|
Configuration > Properties > Device Access > Secure Shell
|
XML
|
Not applicable
|
Configuring Event Reporting
|
Event classes--list
Event security levels--list
Event log
|
Configuration > Properties > Logging
Event Lists
Syslog Setup
|
General or default handling of events
FTP information for automatic backup
Classes for special handling
Trap destinations for SNMP management
Syslog servers
|
Configuration > Properties > Logging > Logging Setup, Syslog Servers, Syslog Setup
|
SMTP servers for email recipients
|
Configuration > Logging > E-Mail Setup
|
Configuring System Information and Parameters
|
Not applicable
|
Configuration > Properties > Device Administration
|
Identification
|
Configuration > Properties > Device Administration > Device
|
Time and date
|
Configuration > Properties > Device Administration > Clock
|
Sessions
• Maximum active IPSec connections
•Compression
|
Configuration > VPN > General > VPN System Options
|
•Hairpinning (Allowing traffic between two or more hosts connected to the same interface
|
Configuration > Interfaces
|
Authentication (global parameters)
|
Configuration > Properties > Device Access > AAA Access
|
Configuring Client Update
|
Not applicable
|
Configuration > VPN > General > Client Update
|
Configuring Load Balancing
|
Not applicable
|
Configuration > VPN > Load Balancing
|
Configuring User Management
|
Users
|
Configuration > Properties > Device Administration > User Accounts
|
Base Group
|
Not applicable
|
Groups
|
Configuration > VPN > General > Group Policy and Configuration > VPN > General > Tunnel Group
|
Configuring Policy Management
|
Access hours
Traffic management
•Network lists
•Rules
•SAs
•Filters
•Bandwidth
|
Configuration > Security Policy
Access Rules
AAA Rules
Filter Rules
Service Policy Rules
|
|
|
|
|
|
|
|
NAT Policy
|
Configuration > NAT
|
Certificate group matching
•Policy (for group derivation)
•Rules
|
Configuration > VPN > IKE > Certificate Group Matching
•Policy
•Rules
|
HTTP and HTTPS
|
Configuration > Properties > HTTP/HTTPS
|
SSL
|
Configuration > Properties > SSL
|
Configuring Web VPN
|
Not applicable
|
Configuration > VPN > WebVPN
|
Access
|
Configuration > VPN > WebVPN > WebVPN Access
|
HTTP/ HTTPS Proxies
|
Configuration > VPN > WebVPN > Proxies
|
Home Page
|
Configuration > VPN > WebVPN > Webpage Customization
|
Logo
|
Configuration > VPN > WebVPN > Webpage Customization
|
E-mail Proxy
|
Configuration > VPN > E-mail Proxy
|
Servers and URLs
|
Configuration > VPN > WebVPN > Servers and URLs, Encoding
|
Port Forwarding
|
Configuration > VPN > WebVPN > Port Forwarding
|
NetBIOS Name Servers
|
Configuration > VPN > Tunnel Group > Add WebVPN Access Tunnel Group > WebVPN tab > NetBIOS Servers tab
|
SSL VPN Client
|
Configuration > VPN > WebVPN > SSL VPN Client
|
Cisco Secure Desktop, Setup and Manager
|
Configuration > Properties > Device Administration > CSD Setup
Configuration CSD Manager
|
Feedback