Corporate Headquarters

3-2
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Scenario Descriptions
Scenario Descriptions
This section includes the following topics:
•
Site-to-Site Scenario, page 3-2
•
Extranet Scenario, page 3-4
•
Configuring a GRE Tunnel, page 3-7
•
Configuring an IPSec Tunnel, page 3-9
•
Configuring Static Inside Source Address Translation, page 3-13
•
Verifying Static Inside Source Address Translation, page 3-13
•
Configuring IKE Policies, page 3-15
•
Verifying IKE Policies, page 3-19
•
Configuring IPSec and IPSec Tunnel Mode, page 3-22
•
Configuring Crypto Maps, page 3-24
•
Configuring Network-Based Application Recognition, page 3-29
•
Configuring Weighted Fair Queuing, page 3-32
•
Verifying Weighted Fair Queuing, page 3-33
•
Configuring Class-Based Weighted Fair Queuing, page 3-33
•
Verifying Class-Based Weighted Fair Queuing, page 3-36
•
Creating Extended Access Lists Using Access List Numbers, page 3-37
•
Verifying Extended Access Lists, page 3-38
•
Applying Access Lists to Interfaces, page 3-38
•
Verifying Extended Access Lists Are Applied Correctly, page 3-39
Site-to-Site Scenario
Figure 3-1
shows a headquarters network providing a remote office access to the corporate intranet. In 
this scenario, the headquarters and remote office are connected through a secure GRE tunnel that is 
established over an IP infrastructure (the Internet). Employees in the remote office are able to access 
internal, private web pages and perform various IP-based network tasks. 
Note
Although the site-to-site VPN scenario in this chapter is configured with GRE tunneling, a site-to-site 
VPN can also be configured with IPSec only tunneling.

---