Understanding Easy VPN Remote Phase 2

Easy VPN Remote devices that connect to an Easy VPN Server headend device can operate in two different modes, client mode and network extension mode. Client mode is really like a Remote Access VPN tunnel, and network extension mode is more like a site-to-site VPN tunnel.

Client Mode

In client mode, the hosts behind the Easy VPN Remote device do not get any IP addresses from the Easy VPN Server's IP address space. Therefore, the hosts behind the Easy VPN Remote device appear as if they are on a different network. Usually, you use port address translation (PAT) with client mode; however, network address translation (NAT) is also supported.

Network Extension Mode

In network extension mode, the hosts behind the Easy VPN Remote device get IP addresses from the Easy VPN Server's IP address space. Therefore, the hosts behind the Easy VPN Remote device appear as if they are on the same network. Basically, the LAN on the corporate network is extended to the remote network. Further, only NAT is supported in network extension mode.