Cisco routers

Guide Cisco 827 and SOHO 77 Routers Hardware Installation Guide Cisco 828 and SOHO 78 Routers Hardware Installation Guide Cisco 837 ADSL Broadband Router Cisco uBR905 and Cisco uBR925 cable access routers Cisco uBR925 Cable Access Router Hardware Installation Guide Cisco uBR905 Hardware Installation Guide Cisco uBR905/uBR925 Cable Access Router Software Configuration Guide Cisco uBR905 Cable Access Router Subscriber Setup Quick Start Card Cisco uBR925 Cable Access Router Subscriber Setup Quick Start Card Cisco uBR925 Cable Access Router Quick Start User Guide Cisco 1700 series routers Cisco 1700 Series Router Software Configuration Guide Cisco 1710 Security Router Hardware Installation Guide Cisco 1710 Security Router Software Configuration Guide Cisco 1711 Security Access Router Cisco 1720 Series Router Hardware Installation Guide Cisco 1721 Access Router Hardware Installation Guide Cisco 1750 Series Router Hardware Installation Guide Cisco 1751 Router Hardware Installation Guide Cisco 1751 Router Software Configuration Guide Cisco 1760 Modular Access Router Hardware Installation Guide Also see the Cisco IOS release notes for Cisco IOS Release 12.2(4)YA: SOHO 70 and Cisco 800 Series--Release Notes for Release 12.2(4)YA Release Notes for Cisco uBR905 and Cisco uBR925 Cable Access Routers for Cisco IOS Release 12.2 YA Cisco 1700 Series--Release Notes for Release 12.2(4)YA Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers Cisco 2600 Series Multiservice Platforms Cisco 2600 Series Routers Hardware Installation Guide Cisco 3600 Series Multiservice Platforms Cisco 3600 Series Hardware Installation Guide Cisco 3700 Series Multiservice Access Routers Cisco 3700 Series Routers Hardware Installation Guide Cisco 2600 Series, 3600 Series, and 3700 Series Regulatory Compliance and Safety Information on Cisco.com IPsec and VPN documentation 802.1x authentication Configuring Cisco IOS Easy VPN Remote with 802.1X Authentication (white paper) VPN Access Control Using 802.1X Local Authentication Access Control Lists Configuration IP Access List Overview Configuration information (additional in-depth) Cisco IOS Security Command Reference -- Provides a reference for each of the Cisco IOS commands used to configure IPsec encryption and related security features. SSL VPN -- Provides information about SSL VPN. cTCP on Cisco Easy VPN remote devices EFT Deployment Guide for Cisco Tunnel Control Protocol on Cisco EasyVPN Dead peer

Resolve technical issues with Cisco products and technologies. Access to most tools on the Cisco Support and Documentation website requires a Cisco.com user ID and password. Feature Information for Easy VPN Remote The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required. Table 4 Feature Information for Easy VPN Remote Feature Name Releases Feature Information Easy VPN Remote 12.2(4)YA Cisco IOS XE Release 2.1 Support for Cisco Easy VPN Remote (Phase I) of this feature was introduced for Cisco 806, Cisco 826, Cisco 827, and Cisco 828 routers; Cisco 1700 series routers; and Cisco uBR905 and Cisco uBR925 cable access routers. In Cisco IOS XE Release 2.1, support for this feature was introduced on Cisco ASR 1000 Series Routers. 12.2(13)T Cisco Easy VPN Remote was integrated into Cisco IOS Release 12.2(13)T. 12.2(8)YJ Support for Cisco Easy VPN Remote (Phase II) of this feature was introduced for Cisco 806, Cisco 826, Cisco 827, and Cisco 828 routers; Cisco 1700 series routers; and Cisco uBR905 and Cisco uBR925 cable access routers. 12.2(15)T The Cisco Easy VPN Remote (Phase II) feature was integrated into Cisco IOS Release 12.2(15)T. Support for the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers was added. 12.3(2)T The Type 6 Password in the IOS Configuration feature was added. 12.3(4)T The Save Password and Multiple Peer Backup features were added. 12.3(7)T The following feature was introduced in this release: 12.3(7)XR The following features were introduced: Dead Peer Detection with Stateless Failover (Object Tracking with Easy VPN)--Backup Server List Local Configuration and Backup Server List Auto Configuration, Management Enhancements, Load Balancing, VLAN Support, Multiple Subnet Support, Traffic-Triggered Activation, Perfect Forward Secrecy (PFS) Via Policy Push, 802.1x Authentication, Certificate

And TechNotes Configure Integrated Services Routers 4000 Series Digital Voice Configuration Guides Most Recent Cisco Unified Border Element Configuration Guide - Cisco IOS XE 17.6 Onwards Programmability Configuration Guide, Cisco IOS XE 17.16.x Cisco 4000 Series ISRs Software Configuration Guide, Cisco IOS XE 17 Segment Routing Configuration Guide, Cisco IOS XE 17 | Access and Edge Routers Programmability Configuration Guide, Cisco IOS XE 17.15.x Security Configuration Guide for SD-Routing Devices Cloud Infrastructure on SD-Routing Devices Network Services Configuration Guide, Cisco IOS XE 17.x Programmability Configuration Guide, Cisco IOS XE 17.13.x IP Switching Cisco Express Forwarding Configuration Guide, Cisco IOS XE Gibraltar 16.10.x Cisco ASR 1000 Series Modular Ethernet Line Card Software Configuration Guide, Cisco IOS XE Gibraltar 17.x System Management Configuration Guide, Cisco IOS XE 17.x Programmability Configuration Guide, Cisco IOS XE Dublin 17.12.x Programmability Configuration Guide, Cisco IOS XE Dublin 17.11.x Programmability Configuration Guide, Cisco IOS XE Dublin 17.10.x View all documentation of this type Feature Guides Cisco V.150.1 Minimum Essential Requirements Configuration Guide Maintain and Operate Maintain and Operate Guides Instructions for Addressing the Cisco Secure Boot Hardware Tampering Vulnerability on Cisco ISR 4000 Series Routers Instructions for Addressing the Cisco Secure Boot Hardware Tampering Vulnerability on Cisco ISR 4000 Series Routers Troubleshooting Error and System Messages System Message Guide for Access and Edge Routers, Cisco IOS XE Bengaluru 17.5.x System Message Guide for Cisco IOS XE 17.16.x System Message Guide for Cisco IOS XE 17.15.x System Message Guide for Cisco IOS XE 17.14.x System Message Guide for Cisco IOS XE 17.13.x System Message Guide for Cisco IOS XE Bengaluru 17.6.x System Message Guide for Cisco IOS XE Cupertino 17.9.x System Message Guide for Cisco IOS XE Cupertino 17.8.x System Message Guide for Cisco IOS XE Cupertino 17.7.x System Message Guide for Cisco IOS XE Dublin 17.12.x System

VPN Remote feature using the debug crypto ipsec client ezvpncommand. Enable debugging of IKE events using the debug crypto ipsecand debug crypto isakmpcommands. Display the active IPsec VPN connections using the show crypto engine connections active command. To reset the VPN connection, use the clear crypto ipsec client ezvpn command. If you have debugging enabled, you might prefer to use the clear crypto sa and clear crypto isakmp commands. Troubleshooting the Client Mode of Operation The following information may be used to troubleshoot the Easy VPN Remote configuration for the client mode of operation. In client mode, the Cisco Easy VPN Remote feature automatically configures the NAT or PAT translation and access lists that are needed to implement the VPN tunnel. These configurations are automatically created when the IPsec VPN connection is initiated. When the tunnel is torn down, the NAT or PAT and access list configurations are automatically deleted. The NAT or PAT configuration is created with the following assumptions: The ip nat inside command is applied to all inside interfaces, including default inside interfaces. The default inside interface is the Ethernet 0 interface (for the Cisco 806, Cisco 826, Cisco 827, Cisco 828, Cisco 831, Cisco 836, and Cisco 837 routers). The ip nat outside command is applied to the interface that is configured with the Cisco Easy VPN Remote configuration. On the Cisco 800 series and Cisco 1700 series routers, the outside interface is configured with the Cisco Easy VPN Remote configuration. On the Cisco 1700 series routers, Cisco 2600 series routers, Cisco 3600 series routers, and Cisco 3700 series routers, multiple outside interfaces can be configured. Note Configuring the ip nat inside and ip nat outsidecommands on the EasyVPN outside and inside interfaces respectively leads to undefined behavior. This configuration is considered invalid. Tip The NAT or PAT translation and access list configurations that are created by the Cisco Easy VPN Remote feature are not written to either the startup configuration or running configuration files. These configurations, however, can be displayed using the show ip nat statistics and show access-list commands. Troubleshooting Remote Management To troubleshoot

Be configured, for details see Easy VPN Server. Optionally, an Easy VPN Server on a Cisco PIX Firewall can be configured, for details see Easy VPN Server. Reactivate Primary Peer Feature An existing Easy VPN remote configuration can be enhanced to accommodate the Reactivate Primary Peer feature using the peer command (and default keyword) and the idle-time command. After the tunnel between the Easy VPN remote and a nondefault peer is working, the Reactivate Primary Peer features takes effect, that is, the Easy VPN remote periodically tries to check the connectivity with the primary peer. Any time the Easy VPN remote detects that the link is working, the Easy VPN remote tears down the existing connection and brings up the tunnel with the primary peer. Restrictions for Cisco Easy VPN Remote Required Easy VPN Servers The Cisco Easy VPN Remote feature requires that the destination peer be a Cisco IOS Easy VPN server or VPN concentrator that supports the Cisco Easy VPN Server feature. At the time of publication, servers or concentrators that support this feature include the following platforms when running the indicated software releases: Cisco 806, Cisco 826, Cisco 827, Cisco 828, Cisco 831, Cisco 836, and Cisco 837 routers--Cisco IOS Release 12.2(8)T or later release. Cisco 800 series routers are not supported in Cisco IOS Release 12.3(7)XR, but they are supported in Cisco IOS Release 12.3(7)XR2. Cisco 870 series--Cisco IOS Release 12.3(8)YI1. Cisco 1700 series--Cisco IOS Release 12.2(8)T or later release. Cisco 1800 series fixed configuration router--Cisco IOS Release 12.3(8)YI. Cisco 1812 router--Cisco IOS Release 12.3(8)YH. Cisco 2600 series--Cisco IOS Release 12.2(8)T or later release. Cisco 3620--Cisco IOS Release 12.2(8)T or later release. Cisco 3640--Cisco IOS Release 12.2(8)T or later release. Cisco 3660--Cisco IOS Release 12.2(8)T or later release. Cisco 7100 series VPN routers--Cisco IOS Release 12.2(8)T or later release. Cisco 7200 series routers--Cisco IOS Release 12.2(8)T or later release. Cisco 7500 series routers--Cisco IOS Release 12.2(8)T or later release. Cisco PIX 500 series--Software Release 6.2 or later release. Cisco VPN 3000 series--Software Release 3.11 or later release. Only ISAKMP Policy Group 2 Supported on Easy VPN