Cisco Easy VPN solution uses the Mode-Configuration (Mode-Config) mechanism within the Internet Key Exchange (IKE) to push policy (attributes) from the Easy VPN Server to the Easy VPN Client or Remote.
The attributes that can be pushed down through Mode-Config include: internal IP address, internal subnet mask, Domain Name Server (DNS) addresses, Windows Internet Name Service (WINS) addresses, backup server list, domain name, client firewall policy, Cisco IOS ® Software configuration, login banner, and Split Tunneling Include List.
STEP 1: Interface configuration
STEP 2: Object-Group configuration
STEP 3: DHCP configuration
STEP 4: Access-List or Security Policy configuration
STEP 5: NAT (Network Address Translation) configuration
STEP 6: AAA (Authentication Authorization and Accounting) configuration
STEP 7: Policy-map & Class-map configuration
STEP 8: Cisco Easy VPN configuration
STEP 9: Management/access configuration
STEP 10: Configuration Verification
Author: Eric Uwonkunda Ngabonziza