Configuring a Site-to-Site VPN Using
SDM
Cisco Security Device Manager (SDM) provides a graphical user interface
(GUI) for configuring and monitoring your routers. It has wizards to
simplify common tasks and is designed to allow small to medium-size businesses
to easily deploy their routers. It comes with 800 to 3800 series routers
at no extra charge. You can use the SDM to configure site-to-site VPNs,
among other things.
The VPN Wizard comes with two IKE policies and an IPsec transform set. It
also has a way for you to enter information manually and edit configurations
created by the wizard.
The Quick Setup Wizard requires just one screen. On it, you enter the
following information:
■ Outgoing interface
■ Peer IP address
■ Authentication information
■ What traffic to encrypt
SDM then shows you a recap of the configuration. You click the Finish
button to apply it.
You can also use the Step-by-step Setup Wizard, which leads you through
each of the tasks separately, letting you have more control over the settings.
It also lets you review the completed configuration before applying it.
When the configuration is complete for one side of the tunnel, you can click
the Generate Mirror button to generate a configuration for the router on the
other side of the tunnel. When both routers are configured, the Test Tunnel
button lets you verify that it is working. There is also a tab to monitor the
VPN tunnel status.