User's Manual

VPN
Configuring the Site-to-Site VPN
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 248
8
• Tranform: The tranform policy used for the IPSec VPN policy.
STEP 2 Click On to enable the Site-to-Site VPN feature, or click Off to disable it.
STEP 3 Check the box of an IPSec VPN policy in the Enable column to enable the IPSec
VPN policy, or uncheck the box to disable the policy.
STEP 4 After you enable the Site-to-Site VPN feature, check the box of an enabled IPSec
VPN policy and click Connect to establish the IPSec VPN tunnel.
STEP 5 To terminate a connected VPN tunnel between two peers, check the box and click
Disconnect.
STEP 6 To refresh the status of Site-to-Site VPN, click Refresh.
Configuring the IPSec VPN Policies
The Site-to-Site VPN policy is used to establish the IPSec VPN tunnel between
two peers. The ISA550 and ISA550W supports up to 50 IPSec VPN tunnels. The
ISA570 and ISA570W supports up to 100 IPSec VPN tunnels.
NOTE Before you create an IPSec VPN policy, make sure that the IKE and transform
policies are configured. Then you can apply the IKE and transform policy on the
IPSec VPN policy.
STEP 1 Click VPN -> Site-to-Site -> IPSec Policies.
The IPSec Policies window opens. All existing IPSec VPN policies are listed in the
table.
STEP 2 To add a new IPSec VPN policy, click Add.
Other options: To edit an entry, click Edit. To delete an entry, click Delete. To
delete multiple entries, check the boxes of the entries and then click Delete
Selection.
After you click Add or Edit, the IPSec Policies - Add/Edit window opens.
STEP 3 In the Basic Settings tab, enter the following information:
• Description: Enter the name for the IPSec VPN policy.