Prerequisites
The following prerequisites must be met for the tunnel to work successfully.
Licensing
- A valid Cisco Secure Access account.
- A Cisco Secure Access organization ID. For more information, see Find Your Organization ID.
Network Access
- You must select a Secure Access data center IP address when creating the Network Tunnel Group (IPsec tunnel). In the sample commands,
<sse_primary_dc_ip,sse_secondary_dc_ip>refers to this IP address. We recommend choosing the IP address based on the data center located closest to your device. - Open UDP ports 500 and 4500 before connecting to the tunnel.
NEC IX router devices do not require public static IPv4 address(es) configured on the interface that will connect to the public internet and Cisco Secure Access Network Tunnel Group. They can be behind a NAT device. This is because we can specify a text as its IKE ID. This ID in combination with the PSK is used to successfully authenticate the NEC IX router devices with the Cisco Secure Access Network Tunnel Group.