User's Manual

VPN
Configuring the Cisco IPSec VPN Client
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 243
8
• Auto Initiation Retry: Click On to enable the Auto Initiation Retry feature, or
click Off to disable it. This feature is used to re-initiate the VPN connection to
the primary server if it does not response during the timeout. When the
primary server can not be connected over the timeout, the client will try to
initiate the VPN connection to the backup servers. If you enable this feature,
enter the following information:
- Retry Interval: Specify how often, in seconds, the security appliance
initiates the VPN conection to the primary server. The default is 120
seconds.
- Retry Limit: Enter the number of times the security appliance will retry a
connection initiation. The default is 0.
• Connect: To manually initiate the IPSec VPN connection, check the box of
the group policy you want and then click Connect.
• Disconnect: To manuall terminate an estalished the IPsec VPN connection,
click Disconnect.
STEP 3 Click Save to apply your settings.
Configuring the Group Policies for Cisco IPSec VPN Client
As a Cisco VPN hardware client, the security appliance will initiate the VPN
connection with a remote Cisco IPSec VPN Server. You can specify up to 16 group
policies used for Cisco IPSec VPN Client to establish the IPSec VPN tunnel.
STEP 1 Click VPN -> Remote User Access -> Cisco IPSec VPN Client.
The Cisco IPSec VPN Client window opens. All existing group policies are listed in
the table.
STEP 2 To add a group policy, click Add.
Other Options: To edit an entry, click Edit. To delete an entry, click Delete. To
delete multiple entries, check the boxes of multiple entries and click Delete
Selection.
After click Add or Edit, the Cisco IPSec VPN Client - Add/Edit window opens.
STEP 3 In the Basic Settings tab, enter the following inforamtion:
• Description: Enter the name for the group policy.