Document Outline

• Contents
• Preface
  • Prerequisites
  • Organization
  • Related Documentation
    • VPN 3002 Hardware Client Documentation
    • VPN 3000 Series Concentrator Documentation
    • VPN Client Documentation
    • Documentation on VPN Software Distribution CDs
    • Other References
  • Documentation conventions
    • Data Formats
  • Obtaining Documentation
    • World Wide Web
    • Documentation CD-ROM
    • Ordering documentation
    • Documentation feedback
  • Obtaining technical assistance
    • Cisco.com
    • Technical Assistance Center
      • Contacting TAC by using the Cisco TAC website
      • Contacting TAC by telephone
• Using the VPN 3002 Hardware Client Manager
  • VPN 3002 Hardware Client Browser Requirements
    • JavaScript and Cookies
    • Navigation Toolbar
    • Recommended PC Monitor/Display Settings
  • Connecting to the VPN 3002 Using HTTP
  • Installing the SSL Certificate in Your Browser
    • Installing the SSL certificate with Internet Explorer
      • Viewing Certificates with Internet Explorer
    • Installing the SSL Certificate with Netscape
      • Reinstallation
      • First-time Installation
      • Viewing Certificates with Netscape
  • Connecting to the VPN 3002 Using HTTPS
  • Configuring HTTP, HTTPS, and SSL Parameters
  • Logging into the VPN 3002 Hardware Client Manager
  • Interactive Hardware Client and Individual User Authentication
    • Interactive Hardware Client Authentication
    • Individual User Authentication
  • Logging In With Interactive Hardware Client and Individual User Authentication
  • Understanding the VPN 3002 Hardware Client Manager Window
  • Organization of the VPN 3002 Hardware Client Manager
  • Navigating the VPN 3002 Hardware Client Manager
• Configuration
  • Configuration
• Interfaces
  • Configuration | Interfaces
    • Interface
      • Ethernet 1 (Private), Ethernet 2 (Public)
      • DNS Server(s)
      • DNS Domain Name
    • Status
    • IP Address
    • Subnet Mask
      • MAC Address
      • Default Gateway
  • Configuration | Interfaces | Private
    • Disabled
    • Static IP Addressing
      • IP Address
      • Subnet Mask
      • MAC Address
      • Speed
      • Duplex
    • Apply/Cancel
      • Reminder:
  • Configuration | Interfaces | Public
    • Disabled
    • DHCP Client
    • PPPoE Client
      • PPPoE User Name
      • PPPoE Password
      • Verify PPPoE Password
    • Static IP Addressing
      • IP Address
      • Subnet Mask
      • MAC Address
      • Speed
      • Duplex
    • Apply / Cancel
      • Reminder:
• System Configuration
  • Configuration | System
• Servers
  • Configuration | System | Servers
  • Configuration | System | Servers | DNS
    • Enabled
    • Domain
    • Primary DNS Server
    • Secondary DNS Server
    • Tertiary DNS Server
    • Timeout Period
    • Timeout Retries
    • Apply / Cancel
      • Reminder:
• Tunneling
  • Configuration | System | Tunneling Protocols
  • Configuration | System | Tunneling Protocols | IPSec
    • Remote Server
    • Backup Servers
      • About Backup Servers
    • IPSec over TCP
    • IPSec over TCP Port
      • About IPSec over TCP
    • Use Certificate
    • Certificate Transmission
    • Group
      • Name
      • Password
      • Verify
    • User
      • Name
      • Password
      • Verify
• IP Routing
  • Configuration | System | IP Routing
  • Configuration | System | IP Routing | Static Routes
    • Static Routes
    • Add / Modify / Delete
      • Reminder:
  • Configuration | System | IP Routing | Static Routes | Add or Modify
    • Network Address
    • Subnet Mask
    • Metric
    • Destination
      • Destination Router Address
      • Interface
    • Add or Apply / Cancel
  • Configuration | System | IP Routing | Default Gateways
    • Default Gateway
    • Metric
    • Apply / Cancel
      • Reminder:
  • Configuration | System | IP Routing | DHCP
    • Enabled
    • Lease Timeout
    • Address Pool Start/End
    • Apply/Cancel
      • Reminder:
  • Configuration | System | IP Routing | DHCP Options
    • DHCP Option
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | IP Routing | DHCP Options | Add or Modify
    • DHCP Option
    • Option Value
    • Nonconfigurable DHCP Options
• Management Protocols
  • Configuration | System | Management Protocols
  • Configuration | System | Management Protocols | HTTP/HTTPS
    • About HTTP/HTTPS
    • Enable HTTP
    • Enable HTTPS
    • Enable HTTPS on Public
    • HTTP Port
    • HTTPS Port
    • Maximum Sessions
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Management Protocols | Telnet
    • Enable Telnet
    • Enable Telnet/SSL
    • Telnet Port
    • Telnet/SSL Port
    • Maximum Connections
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SNMP
    • Enable SNMP
    • SNMP Port
    • Maximum Queued Requests
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SNMP Communities
    • Community Strings
    • Add/Modify/Delete
      • Reminder:
    • Configuration | System | Management Protocols | SNMP Communities | Add or Modify
    • Community String
    • Add or Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SSL
    • Encryption Algorithms
    • Client Authentication
    • SSL Version
    • Generated Certificate Key Size
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SSH
    • Enable SSH
    • Enable SSH on Public
    • SSH Port
    • Maximum Sessions
    • Key Regeneration Period
    • Encryption Algorithms
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | XML
    • Enable XML
    • Enable HTTPS on Public
    • HTTPS IP Address
    • HTTPS Wildcard-mask
    • Enable SSH on Public
    • SSH IP Address
    • SSH Wildcard-mask
• Events
  • Event Class
  • Event Severity Level
  • Event Log
    • Event Log Data
  • Configuration | System | Events
  • Configuration | System | Events | General
    • Syslog Format
    • Severity to Log
    • Severity to Console
    • Severity to Syslog
    • Severity to Trap
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Classes
    • Configured Event Classes
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Classes | Add or Modify
    • Class Name
    • Enable
    • Severity to Log
    • Severity to Console
    • Severity to Syslog
    • Severity to Trap
    • Add or Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Trap Destinations
    • Trap Destinations
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Trap Destinations | Add or Modify
    • Destination
    • SNMP Version
    • Community
    • Port
    • Add or Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Syslog Servers
    • Syslog Servers
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Syslog Servers | Add or Modify
    • Syslog Server
    • Port
    • Facility
    • Add or Apply/Cancel
      • Reminder:
• General
  • Configuration | System | General
  • Configuration | System | General | Identification
    • System Name
    • Contact
    • Location
    • Apply / Cancel
      • Reminder:
  • Configuration | System | General | Time and Date
    • Current Time
    • New Time
    • Enable DST Support
    • Apply/Cancel
      • Reminder:
• Policy Management
  • Client Mode/PAT
    • Client Mode with Split Tunneling
    • VPN 3000 Series VPN Concentrator Settings Required for PAT
  • Network Extension Mode
    • Network Extension Mode with Split Tunneling
    • VPN 3000 Series Concentrator Settings Required for Network Extension Mode
    • Tunnel Initiation
      • Tunnel Initiation with Interactive Hardware Client Authentication
      • Data Initiation
  • Configuration | Policy Management
    • Traffic Management
  • Configuration | Policy Management | Traffic Management
    • PAT
  • Configuration | Policy Management | Traffic Management | PAT
    • Enable
  • Configuration | Policy Management | Traffic Management | PAT | Enable
    • PAT Enabled
    • Apply/Cancel
      • Reminder:
• Administration
  • Administration
  • Administration | Software Update
    • Current Software Revision
    • Browse...
    • Upload/Cancel
    • Software Update Progress
    • Software Update Success
    • Software Update Error
  • Administration | System Reboot
    • Action
    • Configuration
    • When to Reboot/Shutdown
    • Apply/Cancel
  • Administration | Ping
    • Address/Hostname to Ping
    • Ping/Cancel
    • Success (Ping)
      • Continue
    • Error (Ping)
  • Administration | Access Rights
  • Administration | Access Rights | Administrators
    • Administrator
    • Password
    • Verify
    • Enabled
    • Apply/Cancel
  • Administration | Access Rights | Access Settings
    • Session Idle Timeout
    • Session Limit
    • Encrypt Config File
    • Apply/Cancel
  • Administration | File Management
    • View (Save)
    • Delete
    • Swap Config Files
    • Config File Upload via HTTP
  • Administration | File Management | Swap Config Files
    • OK/Cancel
  • Administration | File Management | Config File Upload
    • Local Config File/Browse...
    • Upload/Cancel
    • File Upload Progress
    • File Upload Success
    • File Upload Error
  • Certificate Management
    • Enrolling and Installing Digital Certificates
      • Installing CA Certificates Automatically Using SCEP
      • Installing CA Certificates Manually
    • Enrolling and Installing Identity Certificates
      • Enrolling and Installing Identity Certificates Automatically Using SCEP
      • Enrolling and Installing Identity Certificates Manually
    • Obtaining SSL Certificates
    • Enabling Digital Certificates on the VPN 3002
    • Deleting Digital Certificates
  • Administration | Certificate Management
    • Certificate Authorities Table
      • Fields
    • Identity Certificates Table
    • SSL Certificate Table [ Generate ]
      • Fields
    • Enrollment Status Table
      • [Remove All:]
      • Fields
  • Administration | Certificate Management | Enroll
    • Identity Certificate
    • SSL Certificate
  • Administration | Certificate Management | Enroll | Certificate Type
    • Enroll via PKCS10 Request (Manual)
    • Enroll via SCEP at [Name of SCEP CA]
    • Install a New SA Using SCEP before Enrolling
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Enroll | Certificate Type | PKCS10
    • Fields
    • Enroll / Cancel
  • Administration | Certificate Management | Enrollment or Renewal | RequestGenerated
    • Go to Certificate Management
    • Go to Certificate Enrollment
    • Go to Certificate Installation
  • Administration | Certificate Management | Enroll | IdentityCertificate | SCEP
    • Fields
    • Enroll / Cancel
  • Administration | Certificate Management | Enroll | SSLCertificate | SCEP
    • Fields
    • Enroll
    • Cancel
  • Administration | Certificate Management | Install
    • Install CA Certificate
    • Install SSL Certificate with Private Key
    • Install Certificate Obtained via Enrollment
  • Administration | Certificate Management | Install | Certificate Obtained via Enrollment
    • Enrollment Status Table
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Install | Certificate Type
    • SCEP (Simple Certificate Enrollment Protocol)
    • Cut & Paste Text
    • Upload File from Workstation
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Install | CACertificate | SCEP
    • URL
    • CA Descriptor
    • Retrieve / Cancel
  • Administration | Certificate Management | Install | Certificate Type | Cut and Paste Text
    • Certificate Text
    • Password
    • Install / Cancel
  • Administration | Certificate Management | Install | Certificate Type | Upload File from Workstation
    • Filename / Browse
    • Password
    • Install / Cancel
  • Administration | Certificate Management | View
    • Certificate Fields
    • Back
  • Administration | Certificate Management | ConfigureCACertificate
    • Certificate
    • SCEP Configuration
      • Enrollment URL
      • Polling Interval
      • Polling Limit
    • Apply / Cancel
  • Administration | Certificate Management | Renewal
    • Certificate
    • Renewal Type
    • Enrollment Method
    • Challenge Password
    • Verify Challenge Password
    • Renew / Cancel
  • Administration | Certificate Management | Activate or Re-Submit | Status
    • Status
    • Go to Certificate Management
    • Go to Certificate Enrollment
    • Go to Certificate Installation
  • Administration | Certificate Management | Delete
    • Fields
    • Yes / No
  • Administration | Certificate Management | ViewEnrollmentRequest
    • Enrollment Request Fields
    • Back
  • Administration | Certificate Management | CancelEnrollmentRequest
    • Fields
    • Yes / No
  • Administration | Certificate Management | DeleteEnrollmentRequest
    • Fields
    • Yes / No
• Monitoring
  • Monitoring | Routing Table
  • Monitoring | Filterable Event Log
    • Select Filter Options
    • Event Log Format
  • Monitoring | Live Event Log
    • Pause Display/Resume Display
    • Clear Display
    • Restart
    • Timer
  • Monitoring | System Status
    • Reset
    • Restore
    • Refresh
    • VPN Client Type
    • Bootcode Rev
    • Software Rev
    • Up Since
    • RAM Size
    • Disconnect Now
    • Connect Now
    • Assigned IP Address
    • Tunnel Established to
    • Duration
    • Security Associations
      • Type
      • Remote Address
      • Encryption
      • Authentication
      • Octets In
      • Octets Out
      • Packets In
      • Packets Out
      • Other
    • Front Panel
    • Back Panel
  • Monitoring | System Status | Private/Public Interface
    • Reset
    • Restore
    • Refresh
    • Back
    • Interface
    • IP Address
    • Status
    • Rx Unicast
    • Tx Unicast
    • Rx Multicast
    • Tx Multicast
    • Rx Broadcast
    • Tx Broadcast
  • Monitoring | User Status
    • Refresh
    • Cisco IP Phone Bypass Enabled/Disabled
    • Username
    • IP Address
    • MAC Address
    • Login Time
    • Duration
    • Actions
  • Monitoring | Statistics
  • Monitoring | Statistics | IPSec
    • Reset
    • Restore
    • Refresh
    • IKE (Phase 1) Statistics
      • Active Tunnels
      • Total Tunnels
      • Received Bytes
      • Sent Bytes
      • Received Packets
      • Sent Packets
      • Received Packets Dropped
      • Sent Packets Dropped
      • Received Notifies
      • Sent Notifies
      • Received Phase-2 Exchanges
      • Sent Phase-2 Exchanges
      • Invalid Phase-2 Exchanges Received
      • Invalid Phase-2 Exchanges Sent
      • Rejected Received Phase-2 Exchanges
      • Rejected Sent Phase-2 Exchanges
      • Phase-2 SA Delete Requests Received
      • Phase-2 SA Delete Requests Sent
      • Initiated Tunnels
      • Failed Initiated Tunnels
      • Failed Remote Tunnels
      • Authentication Failures
      • Decryption Failures
      • Hash Validation Failures
      • System Capability Failures
      • No-SA Failures
    • IPSec (Phase 2) Statistics
      • Active Tunnels
      • Total Tunnels
      • Received Bytes
      • Sent Bytes
      • Received Packets
      • Sent Packets
      • Received Packets Dropped
      • Received Packets Dropped (Anti-Replay)
      • Sent Packets Dropped
      • Inbound Authentications
      • Failed Inbound Authentications
      • Outbound Authentications
      • Failed Outbound Authentications
      • Decryptions
      • Failed Decryptions
      • Encryptions
      • Failed Encryptions
      • System Capability Failures
      • No-SA Failures
      • Protocol Use Failures
  • Monitoring | Statistics | HTTP
    • Reset
    • Restore
    • Refresh
    • Octets Sent/Received
    • Packets Sent/Received
    • Packets Sent Sockets/Sessions
      • Active
    • Peak
      • Total
    • HTTP Sessions
      • Login Name
      • IP Address
      • Login Time
      • Encryption
      • Octets Sent/Received
      • Packets Sent/Received
      • Sockets Active
      • Sockets Peak