EzVPN to ASA
Description
This template is a quick script for connecting an IOS router to an ASA with EzVPN. It does not cover nat or nat-exemption configurations. Example
Click Here for Sample Data ASA Side
access-list [[ASA Tunnel-group]]_SPLIT_TUNNEL standard permit [[Hub Subnet]] group-policy [[ASA Tunnel-group]] internal group-policy [[ASA Tunnel-group]] attributes dns-server value [[DNS Servers]] vpn-tunnel-protocol IPSec password-storage enable split-tunnel-policy tunnelspecified split-tunnel-network-list value [[ASA Tunnel-group]]_SPLIT_TUNNEL default-domain value [[Domain Name]] secure-unit-authentication disable user-authentication disable nem enable username [[EZVPN Username]] password [[EZVPN User Password]] tunnel-group [[ASA Tunnel-group]] type remote-access tunnel-group [[ASA Tunnel-group]] general-attributes default-group-policy [[ASA Tunnel-group]] tunnel-group [[ASA Tunnel-group]] ipsec-attributes pre-shared-key [[ASA Tunnel-Group PSK]] IOS Side
crypto isakmp key [[ASA Tunnel-Group PSK]] address [[ASA Outside IP]] crypto isakmp keepalive 10 periodic crypto ipsec client ezvpn [[ASA Tunnel-group]] connect auto group [[ASA Tunnel-group]] key [[ASA Tunnel-Group PSK]] mode network-extension peer [[ASA Outside IP]] username [[EZVPN Username]] password [[EZVPN User Password]] xauth userid mode local interface Fa0/0 description Outside crypto ipsec client ezvpn [[ASA Tunnel-group]] interface Fa0/1 description Inside crypto ipsec client ezvpn [[ASA Tunnel-group]] inside



ASA Tunnel-group:
ASA Tunnel-Group PSK:
ASA Outside IP:
DNS Servers:
Domain Name:
EZVPN Username:
EZVPN User Password:
Hub Subnet:


Use this code to post the full script to your own page:



Use this code to post only the variables to your own page: