Filter
Top Products
24-38
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 24 Managing Site-to-Site VPNs: The Basics
Creating or Editing VPN Topologies
Dial Backup Settings
Enable Backup Available if the selected device is an IOS router that is in a
point-to-point or full mesh topology, or that is a spoke in a
hub-and-spoke topology, or that is a remote client in an Easy VPN
topology.
Whether to configure a backup interface to use as a fallback link for the
primary route VPN interface, if its connection link becomes
unavailable.
Tip Before configuring a backup interface, you must first configure
the dialer interface settings on the device. For more
information, see Dialer Interfaces on Cisco IOS Routers,
page 59-27.
Dialer Interface The logical interface through which the secondary route traffic is
directed when the dialer interface is activated. This can be a Serial,
Async, or BRI interface.
Enter the name of the interface or interface role object, or click Select
to select it from a list.
Primary Next Hop IP
Address
Available only if the selected technology is Regular IPsec, IPsec/GRE,
GRE Dynamic IP, or Easy VPN.
The IP address to which the primary interface connects when it is
active. This is known as the next hop IP address.
If you do not specify the next hop IP address, Security Manager
configures a static route using the VPN interface name. The VPN
interface must be point-to-point or deployment fails.
You can choose the required IP address by clicking Select. The
Network/Hosts selector opens, in which you can select a network from
which the IP address will be allocated.
Tracking IP Address The IP address of the destination device to which connectivity must be
maintained from the primary VPN interface connection. This is the
device that is pinged by the Service Assurance agent through the
primary route to track connectivity. The backup connection is triggered
if connectivity to this device is lost.
If you do not specify an IP address, the primary hub VPN interface is
used in a hub-and-spoke or Easy VPN topology. In a point-to-point or
full mesh VPN topology, the peer VPN interface is used.
You can choose the required IP address by clicking Select. The
Network/Hosts selector opens, in which you can select a network from
which the IP address will be allocated.
Advanced button Available if the selected technology is Regular IPsec, IPsec/GRE, GRE
Dynamic IP, or Easy VPN.
Click this button to configure additional optional settings using the Dial
Backup Settings Dialog Box, page 24-40.
Table 24-6 Edit Endpoints Dialog Box, VPN Interface Tab (Continued)
Element Description