Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN types

Guys we have an ASA which has LAN to LAN VPN and then someone told me that there are remote groups which support windows server remotly. I checked the firewell and saw teh follwoing config

group-policy vpngroup-Windows internal

group-policy vpngroup-Windows attributes

vpn-tunnel-protocol IPSec

tunnel-group vpngroup-Windows type ipsec-ra

tunnel-group vpngroup-Windows general-attributes

address-pool ippool_Windows

tunnel-group vpngroup-kronos ipsec-attributes

pre-shared-key *

ip local pool ippool-Windows mask

guys what is this is this not a LAN to LAN tunnel .......what sort of software the remote will be using to conect......secondly what is teh difference between lan to lan and the above one.......the pool says 10.30 so when the remote guy connect will they get local ip of 10.X or is it something else

Thanks heaps as always

Everyone's tags (2)
Cisco Employee

VPN types

When you define a pool , then you will enable the possibility of using ISAKMP mode config in order to attribute the address on the remote site.

Of course the client then need to be compliant with Cisco EZVPN [ Xauth - mode config]

Lan2Lan does not uses isakmp mode config / xauth