You are here
SEC0248 - FTD 6.1 Site-to-Site VPN (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video walks you through configuration of site-to-site IPSec VPN on Cisco FTD 6.1 with IKEv2. We will explore all three supported VPN topologies; point-to-point, hub-and-spoke, and full mesh. Our topology includes three VPN devices; two FTD as hub and spoke and an ISR router as another spoke.
Part 1 of this video covers configuration of point-to-point VPN
Topic:
- Point-to-Point IPSec VPN
- Hub-and-Spoke VPN
- Full Mesh VPN
- IKEv2 Policy
- IPSec Policy
- Identity NAT
- Prefilter Rule
About Author
Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.
2 comments
FTD VPN License
is there any license to get to configure site to site VPN ?
how many VPN tunnels can we use on the same HA Pair/Device? is there's a limit or something ?
we're using ASA 5555-X HA Pair with FTD code 6.2 and have all four licenses [base, malware, threat, and url] and we need to configure multiple site to site VPNs (about 7)on that Pair
thx
FTD VPN License
No additional license should be needed. Supported number of tunnel should be max supported by the hardware and you can check the latest number of the datasheet but should definitely be more than 7.