Cisco IOS Security Configuration Guide, Release 12.4 - IPsec VPN High Availability Enhancements [Support]

	Cisco IOS Security Configuration Guide, Release 12.4
	IPsec VPN High Availability Enhancements
Cisco IOS Security Configuration Guide, Release 12.4 Authentication, Authorization, and Accounting (AAA) AAA Overview Authentication Configuring Authentication AAA Double Authentication Secured by Absolute Timeout Login Password Retry Lockout MSCHAP Version 2 RADIUS EAP Support RADIUS Packet of Disconnect Configuring Authorization Configuring Accounting Security Server Protocols RADIUS Configuring RADIUS AAA Dead-Server Detection ACL Default Direction Attribute Screening for Access Requests Enable Multilink PPP via RADIUS for Preauthentication User Enhanced Test Command Framed-Route in RADIUS Accounting Offload Server Accounting Enhancement Per VRF AAA RFC-2867 RADIUS Tunnel Accounting RADIUS Attribute Screening RADIUS Centralized Filter Management RADIUS Debug Enhancements RADIUS Logical Line ID RADIUS NAS-IP-Address Attribute Configurability RADIUS Route Download RADIUS Support of 56-Bit Acct Session-Id RADIUS Tunnel Preference for Load Balancing and Fail-Over RADIUS Server Reorder on Failure Tunnel Authentication via RADIUS on Tunnel Terminator TACACS+ Configuring TACACS+ Per VRF for TACACS+ Servers Configuring Kerberos Configuring Kerberos Traffic Filtering, Firewalls, and Virus Detection Access Control Lists: Overview and Guidelines Cisco IOS Firewall Overview Configuring Lock-and-Key Security (Dynamic Access Lists) Configuring IP Session Filtering (Reflexive Access Lists) Configuring TCP Intercept (Preventing Denial-of-Service Attacks) Context-Based Access Control Configuring Context-based Access Control Cisco IOS Firewall Performance Improvements Email Inspection Engine ESMTP Support for Cisco IOS Firewall Firewall ACL Bypass Firewall N2H2 Support Firewall Stateful Inspection of ICMP Firewall Support for SIP Firewall Websense URL Filtering Firewall Support of Skinny Client Control Protocol (SCCP) Granular Protocol Inspection HTTP Inspection Engine Inspection of Router-Generated Traffic Transparent Cisco IOS Firewall Virtual Fragmentation Reassembly Configuring Cisco IOS Intrusion Prevention System (IPS) Network Admission Control Authentication Proxy Configuring Authentication Proxy Firewall Support of HTTPS Authentication Proxy Firewall Authentication Proxy for FTP and Telnet Sessions Configuring Port to Application Mapping IPSec and IKE Internet Key Exchange for IPSec VPNs Call Admission Control for IKE Certificate to ISAKMP Profile Mapping Encrypted Preshared Key Configuring Internet Key Exchange for IPSec VPNs Security for VPNs with IPSec Configuring Security for VPNs with IPSec Cisco Easy VPN Remote Crypto Access Check on Clear-Text Packets DF Bit Override Functionality with IPsec Tunnels Distinguished Name Based Crypto Maps Dynamic Multipoint VPN (DMVPN) Easy VPN Remote RSA Signature Support Easy VPN Server Invalid Security Parameter Index Recovery IP Security VPN Monitoring IPsec and Quality of Service IPSec Anti-Replay Window: Expanding and Disabling IPsec Dead Peer Detection Periodic Message Option IPsec NAT Transparency IPSec Preferred Peer IPsec Security Association Idle Timers IPsec--SNMP Support IPSec Virtual Tunnel Interface IPsec VPN Accounting IPsec VPN High Availability Enhancements Low Latency Queueing (LLQ) for IPsec Encryption Engines L2TP—IPsec Support for NAT and PAT Windows Clients Pre-Fragmentation for IPsec VPNs Real-Time Resolution for IPsec Tunnel Peer Reverse Route Injection SafeNet IPSec VPN Client Support Stateful Failover for IPsec VRF-Aware Ipsec Public Key Infrastructure (PKI) Implementing and Managing PKI Features Roadmap Cisco IOS PKI Overview: Understanding and Planning a PKI Deploying RSA Keys Within a PKI Configuring Authorization and Revocation of Certificates in a PKI Configuring Certificate Enrollment for a PKI Setting Up Secure Device Provisioning (SDP) for Enrollment in a PKI Configuring and Managing a Cisco IOS Certificate Server for PKI Deployment Storing PKI Credentials Other Security Features Neighbor Router Authentication: Overview and Guidelines Configuring IP Security Options Unicast Reverse Path Forwarding Configuring Unicast Reverse Path Forwarding Secure Shell (SSH) Configuring Secure Shell Reverse SSH Enhancements Secure Copy Secure Shell Version 2 Support SSH Terminal-Line Access 802.1X Authentication Services Remote Site IEEE 802.1X Local Authentication Service VPN Access Control Using 802.1X Authentication SSL VPN Secure Infrastructure Autosecure Cisco IOS Login Enhancements (Login Block) Cisco IOS Resilient Configuration Image Verification IP Source Tracker IP Traffic Export Role-Based CLI Access Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices No Service Password-Recovery Appendixes RADIUS Attributes RADIUS Attributes Overview and RADIUS IETF Attributes RADIUS Vendor-Proprietary Attributes Vendor-Specific Attributes (VSA) and RADIUS Disconnect-Cause Attribute Values Connect-Info RADIUS Attribute 77 Encrypted Vendor Specific Attributes Local AAA Server Per-User QoS via AAA Policy Name RADIUS Attribute 5 (NAS-Port) Format Specified on a Per-Server Group Level RADIUS Attribute 8 (Framed-IP-Address) in Access Requests RADIUS Attribute 82: Tunnel Assignment ID RADIUS Attribute 104 RADIUS Progress Codes RADIUS Timeout Set During Pre-Authentication RADIUS Tunnel Attribute Extensions V.92 Reporting Using RADIUS Attribute v.92-info TACACS+ Attribute-Value Pairs TACACS+ Attribute-Value Pairs	Download this chapter IPsec VPN High Availability Enhancements Download the complete book Cisco IOS Security Configuration Guide, Release 12.4 (PDF - 14 MB) Table Of Contents IPsec VPN High Availability Enhancements IPsec VPN High Availability Enhancements This document has been moved. We apologize for any inconvenience. The new location for this document is http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_vpn_ha_enhance.html
	© 1992-2009 Cisco Systems, Inc. All rights reserved. Terms & Conditions \| Privacy Statement \| Cookie Policy \| Trademarks of Cisco Systems, Inc.

Table Of Contents

IPsec VPN High Availability Enhancements