User's Manual

VPN
Configuring the Cisco IPSec VPN Client
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 245
8
permit the access, or click click Deny to deny the access. By default, the access
from all zones to the remote network is permitted.
NOTE The VPN access control rules that are automatically generated by the Zone
Access Control settings will be added to the firewall access rule table with
the priority higher than the default firewall access rules, but lower than the
custom firewall access rules.
STEP 5 In the Advanced Settings tab, enter the following information.
• Backup Server 1/2/3: You can specify up to three backup servers. When
the primary server is disconnected, your security appliance can initiate the
VPN connection to the backup servers. The backup server 1 has the highest
priority and the backup server 3 has the lowest priority.
NOTE The Cisco VPN hardware client can get the backup servers from the
remote Cisco IPSec VPN server during the tunnel negotiation. The
backup servers specified on the remote Cisco IPSec VPN server have
higher priority than the back servers specified on the Cisco VPN
hardware client. When the primary server is disconnected, firstly try
to connect to the backup servers specified on the Cisco IPSec VPN
server, and then try to connect to the backup servers specified on the
Cisco VPN hardware client.
• Peer Timeout: Enter the time in minutes that the client retries to connect the
backup server.
STEP 6 Click OK to save your settings.
STEP 7 Click Save to apply your settings.
STEP 8 To check the status and statistic information for IPSec VPN tunnels, go to the
Session Status -> VPN Table page. See Monitoring the IPSec VPN Status,
page 269.