Cisco Systems VPN 3002 Uživatelský manuál

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

xVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceOrganizationChapter 5 Servers Explains how to configure the VPN 3002 to communicate with DNS serv

9-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsEvent LogEvent LogThe VPN 3002 records events in an event log, which is stored in

9-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | EventsConfiguration | System | EventsThis section of the

9-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | GeneralSyslog FormatClick the Syslog Format dro

9-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | GeneralThe Original severities and the Cisco IO

9-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | ClassesSeverity to TrapClick the drop-down menu

9-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | ClassesFigure 9-3 Configuration | System | Even

9-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Classes | Add or ModifyConfiguration | System

9-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Classes | Add or ModifySeverity to ConsoleClic

9-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Trap DestinationsConfiguration | System | Even

9-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Trap Destinations | Add or ModifyTo remove an

xiVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceRelated DocumentationRelated DocumentationRefer to the following documents for further informati

9-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Syslog ServersPortEnter the UDP port number by

9-15VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Syslog ServersSyslog ServersThe Syslog Servers

9-16VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Syslog Servers | Add or ModifyConfiguration |

9-17VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Syslog Servers | Add or ModifyAdd or Apply/Can

9-18VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsConfiguration | System | Events | Syslog Servers | Add or Modify

CHAPTER 10-1VPN 3002 Hardware Client ReferenceOL-1893-0110GeneralGeneral configuration parameters include VPN 3002 environment items: system identific

10-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 10 GeneralConfiguration | System | General | IdentificationConfiguration | System | Gene

10-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 10 GeneralConfiguration | System | General | Time and DateConfiguration | System | Gener

10-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 10 GeneralConfiguration | System | General | Time and DateReminder:To save the active co

CHAPTER 11-1VPN 3002 Hardware Client ReferenceOL-1893-0111Policy ManagementThe VPN 3002 works in either of two modes: Client mode or Network Extension

xiiVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceDocumentation conventionsversions on the Cisco web site, click the Support icon on the toolbar

11-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementNetwork Extension ModeThe network and addresses on the private side

11-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementNetwork Extension ModeNetwork Extension Mode with Split TunnelingYou

11-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementNetwork Extension ModeTunnel InitiationThe VPN 3002 always initiates

11-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementConfiguration | Policy ManagementTable 11-1 Data Initiation: VPN 300

11-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementConfiguration | Policy Management | Traffic Management | PATPATTo co

11-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementConfiguration | Policy Management | Traffic Management | PAT | Enabl

11-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 11 Policy ManagementConfiguration | Policy Management | Traffic Management | PAT | Enabl

CHAPTER 12-1VPN 3002 Hardware Client ReferenceOL-1893-0112AdministrationAdministering the VPN 3002 involves activities that keep the system operationa

12-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Software UpdateFigure 12-1 Administration ScreenAdmini

12-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Software UpdateFigure 12-2 Administration | Software U

xiiiVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceObtaining DocumentationData FormatsAs you configure and manage the system, enter data in the f

12-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Software UpdateSoftware Update ProgressThis window sho

12-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | System RebootFigure 12-5 Administration | Software Upd

12-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | System RebootFigure 12-6 Administration | System Reboo

12-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Ping• Reboot ignoring the Configuration file = Reboot

12-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | PingAddress/Hostname to PingEnter the IP address or ho

12-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Access RightsAdministration | Access RightsThis sectio

12-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Access Rights | AdministratorsAdministratorThe VPN 30

12-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Access Rights | Access SettingsAdministration | Acces

12-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | File ManagementAdministration | File ManagementThis s

12-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | File Management | Swap Config FilesSwap Config FilesS

xivVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceObtaining technical assistanceOrdering documentationCisco documentation is available in the fol

12-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | File Management | Config File UploadAdministration |

12-15VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | File Management | Config File UploadFigure 12-16 Admi

12-16VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementCertificate ManagementDigital certificates are a

12-17VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementIf you have trouble enrolling or installing digi

12-18VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementStep 2 Click Click here to install a CA certific

12-19VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementInstalling CA Certificates ManuallyNote If you i

12-20VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementEnrolling and Installing Identity CertificatesWh

12-21VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementVerify Challenge Password - No Yes Re-enter the

12-22VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementEnrolling and Installing Identity Certificates A

12-23VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementFigure 12-25 Administration | Certificate Manage

xvVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceObtaining technical assistanceCustomers and partners can self-register on Cisco.com to obtain ad

12-24VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementFigure 12-26 Administration | Certificate Manage

12-25VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementFigure 12-27 Administration | Certificate Manage

12-26VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementStep 7 Using the enrollment request you just gen

12-27VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementFigure 12-31 Administration | Certificate Manage

Obtaining SSL CertificatesIf you use a secure connection between your browser and the VPN 3002, the VPN 3002 requires an SSL certificate. You only nee

12-29VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementEnabling Digital Certificates on the VPN 3002Not

12-30VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationCertificate ManagementDeleting Digital CertificatesDelete digital cert

12-31VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementAdministration | Certificate Ma

12-32VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementCertificate Authorities TableTh

12-33VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementSSL Certificate Table [ Generat

xviVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceObtaining technical assistance

12-34VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementFieldsThese fields appear in th

12-35VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementEnrollment Status TableThis tab

12-36VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate ManagementStatus • In Progress = The requ

12-37VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | EnrollAdministration | Certi

12-38VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enroll | Certificate TypeAdm

12-39VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enroll | Certificate Type |

12-40VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enrollment or Renewal | Requ

12-41VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enroll | Identity Certificat

12-42VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enroll | SSL Certificate | S

12-43VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Enroll | SSL Certificate | S

CHAPTER 1-1VPN 3002 Hardware Client ReferenceOL-1893-011Using the VPN 3002 Hardware Client ManagerThe VPN 3002 Hardware Client Manager is an HTML-base

12-44VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | InstallAdministration | Cert

12-45VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Install | Certificate Obtain

12-46VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Install | Certificate TypeAd

12-47VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Install | CA Certificate | S

12-48VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Install | Certificate Type |

12-49VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Install | Certificate Type |

12-50VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | ViewAdministration | Certifi

12-51VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | ViewCertificate FieldsA cert

12-52VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | ViewBackTo return to the Adm

12-53VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Configure CA CertificateAdmi

1-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerConnecting to the VPN 3002 Using HTTPJavaScri

12-54VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | RenewalPolling LimitEnter th

12-55VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | RenewalCertificateThis field

12-56VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Activate or Re-Submit | Stat

12-57VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | DeleteAdministration | Certi

12-58VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | View Enrollment RequestYes /

12-59VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | View Enrollment RequestEnrol

12-60VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Cancel Enrollment RequestBac

12-61VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Delete Enrollment RequestFie

12-62VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 12 AdministrationAdministration | Certificate Management | Delete Enrollment RequestFie

CHAPTER 13-1VPN 3002 Hardware Client ReferenceOL-1893-0113MonitoringThe VPN 3002 tracks many statistics and the status of many items essential to syst

1-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Routing TableMonitoring | Routing TableThis screen shows the V

13-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Filterable Event LogMonitoring | Filterable Event LogThis scre

13-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Filterable Event LogSelect Filter OptionsYou can select any or

13-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Filterable Event LogEvent Log FormatEach entry (record) in the

13-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Live Event LogMonitoring | Live Event LogThis screen shows eve

13-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Live Event LogFigure 13-4 Monitoring | Live Event Log ScreenPa

13-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System StatusMonitoring | System StatusThis screen shows the s

13-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System StatusRefreshTo update the screen and its data, click R

13-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System StatusTunnel Established toThe IP address of the VPN C

13-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System Status | Private/Public InterfaceOtherAdditional infor

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOM

1-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System Status | Private/Public InterfaceRestoreTo restore the

13-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | System Status | Private/Public InterfaceRx UnicastThe number

13-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | User StatusMonitoring | User StatusThis section displays stat

13-15VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | StatisticsMonitoring | StatisticsThis section of the Manager

13-16VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecMonitoring | Statistics | IPSecThis screen

13-17VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecRefreshTo update the screen and its data, c

13-18VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecReceived NotifiesThe cumulative total of no

13-19VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecPhase-2 SA Delete Requests SentThe cumulati

13-20VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecIPSec (Phase 2) StatisticsThis table provid

13-21VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | IPSecSent Packets DroppedThe cumulative total of

1-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-22VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | HTTPSystem Capability FailuresThe total number o

13-23VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | HTTPResetTo reset, or start anew, the screen con

13-24VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | HTTPHTTP SessionsThis section provides informati

13-25VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | TelnetMonitoring | Statistics | TelnetThis scree

13-26VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | TelnetAttempted SessionsThe total number of atte

13-27VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | DNSMonitoring | Statistics | DNSThis screen show

13-28VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | SSLTimeoutsThe number of DNS queries that failed

13-29VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | SSLRefreshTo update the screen and its data, cli

13-30VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | DHCPMonitoring | Statistics | DHCPThis screen sh

13-31VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | DHCPTimeoutsThe number of DHCP queries that fail

1-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-32VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | SSHMonitoring | Statistics | SSHThis screen show

13-33VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | SSHPackets Sent/ReceivedThe total number of SSH

13-34VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | NATMonitoring | Statistics | NATThis screen show

13-35VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | NATTranslations ActiveThe number of currently ac

13-36VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | PPPoE• NetBIOS over TCP Proxy• NetBIOS over UDP

13-37VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | PPPoEUser NameThe username for the PPPoE session

13-38VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | PPPoEPADT RxThe number of PPPoE Active Discovery

13-39VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-IIMonitoring | Statistics | MIB-IIThis secti

13-40VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | InterfacesMonitoring | Statistics | MIB

13-41VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | Interfaces• Disabled = configured by di

1-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-42VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | TCP/UDPMonitoring | Statistics | MIB-II

13-43VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | TCP/UDPTCP Segments TransmittedThe tota

13-44VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | TCP/UDPTCP Established ResetsThe number

13-45VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | IPMonitoring | Statistics | MIB-II | IP

13-46VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | IPPackets Received (Total)The total num

13-47VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | IPOutbound Packets with No RouteThe num

13-48VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | ICMPMonitoring | Statistics | MIB-II |

13-49VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | ICMPErrors Received/TransmittedThe numb

13-50VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | ICMPTimestamp Requests Received/Transmi

13-51VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | ARP TableMonitoring | Statistics | MIB-

1-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

13-52VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | ARP TableInterfaceThe VPN 3002 network

13-53VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | EthernetMonitoring | Statistics | MIB-I

13-54VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | EthernetAlignment ErrorsThe number of f

13-55VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | EthernetExcessive CollisionsThe number

13-56VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | SNMPMonitoring | Statistics | MIB-II |

13-57VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | SNMPBad Community StringThe total numbe

13-58VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 13 MonitoringMonitoring | Statistics | MIB-II | SNMP

CHAPTER 14-1VPN 3002 Hardware Client ReferenceOL-1893-0114Using the Command-Line InterfaceThe VPN 3002 Hardware Client command-line interface (CLI) is

14-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceStarting the Command-line Interface3. Press Enter on t

14-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceUsing the Command-line InterfaceUsing the Command-lin

1-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Browse

14-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceUsing the Command-line InterfaceNavigating QuicklyTher

14-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceUsing the Command-line InterfaceAs a shortcut, you ca

14-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceUsing the Command-line InterfaceSaving the Configurati

14-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceMenu ReferenceMenu ReferenceThis section shows all th

14-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceMenu Reference1.2.1 or 1.2.2 Configuration > Interf

14-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceMenu Reference1.3.5 Configuration > System Managem

14-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceMenu Reference2.2 Administration > System Reboot1)

14-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceMenu Reference2.4.2 Administration > Access Right

14-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceMenu Reference2.6.3 Administration > Certificate M

14-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 14 Using the Command-Line InterfaceMenu Reference3.1 Monitoring > Routing TableRouti

1-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

14-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter14 Using the Command-Line InterfaceMenu Reference3.4 Monitoring > User StatusAuthenti

A-1VPN 3002 Hardware Client ReferenceOL-1893-01APPENDIXATroubleshooting and System ErrorsAppendix A describes files for troubleshooting the VPN 3002

A-2VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsLED Indicatorscrash, we ask that you send this file w

A-3VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsSystem ErrorsVPN 3002 Rear LEDsThe LEDs on the rear o

A-4VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsSettings on the VPN ConcentratorSettings on the VPN C

A-5VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsVPN 3002 Hardware Client Manager ErrorsStep 4 If you

A-6VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsVPN 3002 Hardware Client Manager ErrorsManager Logs O

A-7VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsVPN 3002 Hardware Client Manager ErrorsIncorrect Disp

A-8VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsVPN 3002 Hardware Client Manager ErrorsNot Allowed Me

A-9VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsVPN 3002 Hardware Client Manager ErrorsNot FoundThe M

1-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

A-10VPN 3002 Hardware Client ReferenceOL-1893-01Appendix A Troubleshooting and System ErrorsCommand-line Interface ErrorsCommand-line Interface

IN-1VPN 3002 Hardware Client ReferenceOL-1893-01INDEXNumerics3DES-168/SHA SSL encryption algorithm 8-113DES-168 SSH encryption algorithm 8-14Aaccessi

IndexIN-2VPN 3002 Hardware Client ReferenceOL-1893-01cancelling an enrollment request 12-60certificatePEM-encoded12-28Certificate Authority (CA)defin

IndexIN-3VPN 3002 Hardware Client ReferenceOL-1893-01crash, systemsaves log fileA-1CRSHDUMP.TXT file A-1Ddata formats xiiidata initiationVPN 3002 and

IndexIN-4VPN 3002 Hardware Client ReferenceOL-1893-01cancelling 12-60creating 12-37deleting 12-61PKCS-10 12-24, 12-40removing according to status 12-

IndexIN-5VPN 3002 Hardware Client ReferenceOL-1893-01generating SSL server certificate 12-33get event log 13-5Hhalting the VPN 3002 12-5help, CLI 14-

IndexIN-6VPN 3002 Hardware Client ReferenceOL-1893-01attributes configurable on the central-site concentrator6-2configuring 6-2statistics 13-16IPSec

IndexIN-7VPN 3002 Hardware Client ReferenceOL-1893-01required settings on VPN Concentrator 11-3nonvolatile memory 12-10event log stored in 13-3No suc

IndexIN-8VPN 3002 Hardware Client ReferenceOL-1893-01browser 1-1Internet Explorer 1-1IPSec over TCP 6-6JavaScript 1-2Netscape Navigator 1-1RFC 1650,

IndexIN-9VPN 3002 Hardware Client ReferenceOL-1893-01updating on VPN 3002procedure12-2stopping an image update 12-3version info 12-3, 13-9split tunne

1-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

IndexIN-10VPN 3002 Hardware Client ReferenceOL-1893-01superuser See administratorsswap configuration files12-13syslog format, events 9-6syslog server

IndexIN-11VPN 3002 Hardware Client ReferenceOL-1893-01event log 13-5SSL certificateswith Internet Explorer1-8with Netscape 1-14VPN 3002 status, sessi

IndexIN-12VPN 3002 Hardware Client ReferenceOL-1893-01

1-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

iiiVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01CONTENTSPreface ixPrerequisites ixOrganization ixRelated Documentation xi

1-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

1-15VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInstalling the SSL Certificate in Your Brows

1-16VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerConnecting to the VPN 3002 Using HTTPSFigure

1-17VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerLogging into the VPN 3002 Hardware Client Ma

1-18VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerLogging into the VPN 3002 Hardware Client Ma

1-19VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerInteractive Hardware Client and Individual U

1-20VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerLogging In With Interactive Hardware Client

1-21VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerLogging In With Interactive Hardware Client

1-22VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerLogging In With Interactive Hardware Client

1-23VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerUnderstanding the VPN 3002 Hardware Client M

ContentsivVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01Servers 5-1Configuration | System | Servers 5-1Configuration | Sys

1-24VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerUnderstanding the VPN 3002 Hardware Client M

1-25VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerUnderstanding the VPN 3002 Hardware Client M

1-26VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerUnderstanding the VPN 3002 Hardware Client M

1-27VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerOrganization of the VPN 3002 Hardware Client

1-28VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 1 Using the VPN 3002 Hardware Client ManagerNavigating the VPN 3002 Hardware Client Mana

CHAPTER 2-1VPN 3002 Hardware Client ReferenceOL-1893-012ConfigurationConfiguring the VPN 3002 means setting all the parameters that govern its use and

2-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 2 ConfigurationConfiguration

CHAPTER 3-1VPN 3002 Hardware Client ReferenceOL-1893-013InterfacesThis section of the VPN 3002 Hardware Client Manager applies functions that are inte

3-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter3 InterfacesConfiguration | InterfacesFigure 3-1 VPN 3002 Configuration | Interfaces Scree

3-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 3 InterfacesConfiguration | InterfacesStatusThe operational status of this interface:• UP

ContentsvVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01Configuration | System | Events | Classes | Add or Modify 9-10Confi

3-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter3 InterfacesConfiguration | Interfaces | PrivateConfiguration | Interfaces | PrivateThis s

3-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 3 InterfacesConfiguration | Interfaces | PrivateSubnet MaskEnter the subnet mask for this

3-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter3 InterfacesConfiguration | Interfaces | PublicConfiguration | Interfaces | PublicThis scr

3-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 3 InterfacesConfiguration | Interfaces | PublicPPPoE User NameIf you have selected PPPoE,

3-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter3 InterfacesConfiguration | Interfaces | PublicDuplexIf you are using static IP addressing

CHAPTER 4-1VPN 3002 Hardware Client ReferenceOL-1893-014System ConfigurationSystem configuration means configuring parameters for system-wide function

4-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 4 System ConfigurationConfiguration | System

CHAPTER 5-1VPN 3002 Hardware Client ReferenceOL-1893-015ServersConfiguring servers means identifying DNS servers to the VPN 3002 so it can communicate

5-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 5 ServersConfiguration | System | Servers | DNSFigure 5-2 Configuration | System | Server

5-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 5 ServersConfiguration | System | Servers | DNSTimeout PeriodEnter the initial time in se

ContentsviVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01Administration | Certificate Management | Enroll | Certificate Typ

5-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 5 ServersConfiguration | System | Servers | DNS

CHAPTER 6-1VPN 3002 Hardware Client ReferenceOL-1893-016TunnelingTunneling is the heart of virtual private networking. Tunnels make it possible to use

6-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter6 TunnelingConfiguration | System | Tunneling ProtocolsConfiguration | System | Tunneling

6-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 6 TunnelingConfiguration | System | Tunneling Protocols | IPSec–DES-56–3DES-168• Extended

6-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter6 TunnelingConfiguration | System | Tunneling Protocols | IPSecNote If you are using hostn

6-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 6 TunnelingConfiguration | System | Tunneling Protocols | IPSecThe VPN 3002 in Fargo firs

6-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter6 TunnelingConfiguration | System | Tunneling Protocols | IPSecAbout IPSec over TCPIPSec o

6-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 6 TunnelingConfiguration | System | Tunneling Protocols | IPSecPasswordIn the Group Passw

6-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter6 TunnelingConfiguration | System | Tunneling Protocols | IPSec

CHAPTER 7-1VPN 3002 Hardware Client ReferenceOL-1893-017IP RoutingThe VPN 3002 includes an IP routing subsystem with static routing, default gateways,

ContentsviiVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01Monitoring | Statistics | PPPoE 13-36Monitoring | Statistics | MI

7-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | Static RoutesConfiguration | System | I

7-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | Static Routes | Add or ModifyConfigurat

7-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | Default GatewaysDestinationClick a radi

7-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | Default GatewaysDefault GatewayEnter th

7-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | DHCPConfiguration | System | IP Routing

7-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | DHCP OptionsApply/CancelTo apply the se

7-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | DHCP Options | Add or ModifyTo remove a

7-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | DHCP Options | Add or ModifyNonconfigur

7-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 7 IP RoutingConfiguration | System | IP Routing | DHCP Options | Add or Modify

CHAPTER 8-1VPN 3002 Hardware Client ReferenceOL-1893-018Management ProtocolsThe VPN 3002 Hardware Client includes various built-in servers, using vari

ContentsviiiVPN 3000 Series Concentrator Reference Volume I: Configuration78-13782-01

8-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | HTTP/HTTPSConfigura

8-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | HTTP/HTTPSEnable HT

8-4VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | TelnetFigure 8-3 Co

8-5VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | TelnetEnable Telnet

8-6VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SNMPConfiguration |

8-7VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SNMP CommunitiesRem

8-8VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SNMP CommunitiesCom

8-9VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SNMP CommunitiesFig

8-10VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSLConfiguration |

8-11VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSLFigure 8-12 Con

ixVPN 3002 Hardware Client ReferenceOL-1893-01PrefaceThe VPN 3002 Hardware Client Reference provides guidelines for configuring the Cisco VPN 3002, d

8-12VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSLSSL VersionClic

8-13VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSHFigure 8-13 Con

8-14VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSHEnable SSHCheck

8-15VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | SSHApply / CancelT

8-16VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | XMLConfiguration |

8-17VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | XMLHTTPS IP Addres

8-18VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 8 Management ProtocolsConfiguration | System | Management Protocols | XML

CHAPTER 9-1VPN 3002 Hardware Client ReferenceOL-1893-019EventsAn event is any significant occurrence within or affecting the VPN 3002 such as an alarm

9-2VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsEvent ClassEVENTMIB Event MIB changes*FSM Finite State Machine subsystem (for deb

9-3VPN 3002 Hardware Client ReferenceOL-1893-01Chapter 9 EventsEvent Severity LevelNote The Cisco-specific event classes provide information tha