Filter
Top Products
7-14
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 7 Managing FlexConfigs
Understanding FlexConfig Policies and Policy Objects
Table 7-4 VPN System Variables
Name Dimension Description
Topology
Variables related to the VPN in which a device participates. Configure VPNs to generate values for
these variables.
SYS_VPN_TOPOLOGY 1 Virtual private network (VPN) topology type.
Possible values are HUB_AND_SPOKE,
POINT_TO_POINT, and FULL_MESH.
SYS_VPN_TOPOLOGY_NAM
E
1 Name of the VPN topology in which the device
participates.
SYS_VPN_TOPOLOGY_ROLE 1 Details about the role of the device in the VPN.
Possible values are PEER, HUB, and SPOKE.
Devices
Variables related to devices in the VPN in which a device participates. Configure VPNs to generate
values for these variables.
SYS_VPN_HOST_NAME 1 Device hostname.
SYS_VPN_LOCAL_PREFIXE
S
2 Interface and network IP addresses of protected
networks.
SYS_VPN_PRIVATE_INTERF
ACES
2 Private interface names.
SYS_VPN_PRIVATE_TUNNE
L_ENDPT_IP
1 Interface tunnel IP address.
SYS_VPN_PUBLIC_INTERFA
CES
2 Public interface names.
SYS_VPN_TUNNEL_ENDPT_
INTERFACE_IP
1 IP address of the VPN endpoint. In IPSec, the
endpoint is the VPN interface; in GRE, it is the tunnel
source.
SYS_VPN_TUNNEL_ENDPT_
INTERFACE_NAME
1 Name of the VPN endpoint. In IPSec, the endpoint is
the VPN interface; in GRE, it is the tunnel source.
SYS_VPN_VPNSM_PUBLIC_I
FC
2 Export port names for Catalyst 6000 series switches.
Remote Peers
Variables related to remote peers in which a device participates. Configure VPNs to generate values
for these variables.
SYS_VPN_REM_PEER_BAK_
LOGICAL_PRIVATE_IP
3 Interface tunnel IP addresses of remote peers of
failover hubs. This value is used in DMVPN for next
hop resolution protocol (NHRP).
SYS_VPN_REM_PEER_BAK_
PREFIX
3 Protected networks (interface and network IP
addresses) of remote peers of failover hubs.
SYS_VPN_REM_PEER_BAK_
PUBLIC_IP
3 Public interface names of remote peers of failover
hubs.