Cisco VPN Configuration Guide

Become an expert in Cisco VPN technologies with this practical and comprehensive configuration guide. Learn how to configure IPSEC VPNs (site-to-site, hub-and-spoke, remote access), SSL VPN, DMVPN, GRE, VTI etc.

This book is packed with step-by-step configuration tutorials and real world scenarios to implement VPNs on Cisco ASA Firewalls (v8.4 and above and v9.x) and on Cisco Routers. It is filled with raw practical concepts, around 40 network diagrams to explain the scenarios, troubleshooting instructions, 20 complete configurations on actual devices and much more. Both beginners and experts will find some golden nuggets inside this practical guide.

Every Cisco Networking Professional in this planet will have to configure some kind of VPN sooner or later in his/her professional career. This VPN Guide, therefore, will be a great reference for years to come.

Policy-Based (IPSEC) and Route-Based VPNs (Comparison and Applications).
• Practical Applications of each VPN Technology.
• Configuration of Site-to-Site, Hub-and-Spoke and Remote Access IPSEC VPNs on Cisco Routers.
• Configuration of Route-Based VPNs using GRE, Static VTI, Dynamic VTI.
• Configuration of Dynamic Multipoint VPN (DMVPN) on Cisco Routers.
• Configuration of PPTP VPNs on Cisco Routers.
• Configuration of Site-to-Site and Hub-and-Spoke IPSEC VPNs (including IKEv2 IPSEC) on Cisco ASA Firewalls.
• Configuration of Remote Access IPSEC VPN and Anyconnect SSL VPN on Cisco ASA Firewalls.
• VPN Authentication using Active Directory, RSA Server and external AAA Server.

In addition to the most popular VPN topologies and scenarios, the book contains also some special cases for which you will not find information easily anywhere else.

Some special cases and scenarios included in the book:
• VPNs with sites having dynamic public IP address.
• Implementations of hub-and-spoke together with remote access VPNs on the same device.
• Using Dynamic Routing Protocols (EIGRP) to make VPNs on Routers more scalable.
• Spoke to Spoke communication via the Hub Site (using VPN Hairpinning on ASA).
• Remote Access users to communicate with Spoke sites via the Hub (using VPN Hairpinning on ASA).
• Site-to-Site IPSEC VPN with duplicate subnets on the two sites.
• IPSEC VPN Failover with backup ISP.