user manual

Chapter 21 Cisco IOS SSL VPN
Additional Help Topics
21-50
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
How do I configure a Cisco IOS SSL VPN after I have configured
a firewall?
If you have already configured a firewall, you can still use the Cisco IOS
SSL VPN wizards in Cisco SDM to create Cisco IOS SSL VPN contexts and
policies. Cisco SDM validates the Cisco IOS SSL VPN CLI commands that it
generates against the existing configuration on the router. If it detects an existing
firewall configuration that would have to be modified to allow Cisco IOS
SSL VPN traffic to pass through, you are informed. You can allow Cisco SDM to
make the necessary modifications to the firewall, or you can leave the firewall
intact and make the changes manually by going to Configure > Firewall and
ACL > Edit Firewall Policy/ACL and entering the permit statements that allow
Cisco IOS SSL VPN traffic to pass through the firewall.
How do I associate a VRF instance with a Cisco IOS SSL VPN
context?
VPN Routing and Forwarding (VFR) instances maintain a routing table and a
forwarding table for a VPN. You can associate a VRF instance or name with a
Cisco IOS SSL VPN context by going to Configure > VPN > SSL VPN > Edit
SSL VPN. Select the context that you want to associate a VRF instance to and
click Edit. Select the name of the VRF instance in the dialog displayed.
Note The VRF instance must already be configured on the router.