The documentation on the internet has been less-than-helpful, and the management interface is not very straight-forward for people who don't know all the VPN jargon.
I just want to be able to open Cisco QuickVPN from any computer on the internet - provide username and password - and instantly have access to my internal network.
VPN users are set up as follows, and this appears to be fairly straight-forward:
So then I go to the VPN -> Summary page, and it looks like this:
Then I click "Add New Tunnel" and this displays:
So then I click the second option (Client to Gateway) and the configuration page displays:
I've tried to set this up based on what I know about networking, but the terms used on this page are so ambiguous that I don't really understand what it is I am configuring:
- Tunnel vs Group VPN - GroupVPN is what I've used with SonicWall to create this exact type of VPN, so I figured I go with what sounded familiar. Am I mistaken here?
- Local Security Group Type - IP Address vs IP Range vs Subnet - IP Range seems like the simplest option to me, so I entered a unused IP range that is outside of my DHCP range.
Remote Client - I have no idea what this means - Do I have to specify what FQDNs are allowed to connect to this VPN? What's the difference between "Domain Name" and "E-mail Address," and how would it change my confguration? And what does "Microsoft XP/2000 VPN Client" refer to, when I am using a Cisco VPN client to connect? I want it to be globally accessible, with nothing more than a username & password required.
- What bearing does IPSec have on this? I don't want to have to jump through hoops to connect. I have left the IPSec settings at default values (except the Preshared Key, which is required), but was not able to connect to the VPN - And the QuickVPN client doesn't appear to have any place to enter the Preshared Key:
How do I need to configure this to get the VPN to function? The fewer the client requirements, the better.