Table of Contents
Advertisement
Chapter 3
Using the VPN 3002 Hardware Client Manager for Quick Configuration
Configuring IPSec
After you click Continue to apply your changes to the Public Interface parameters, the Manager displays
the Configuration | Quick | IPSec screen.
Figure 3-11 Configuration | Quick | IPSec Screen
This screen lets you configure the IPSec parameters. IPSec is the protocol that enables the VPN 3002 to
connect to the VPN Concentrator over a secure VPN tunnel. The VPN 3002 can also establish IPSec
tunnels to other IPSec security gateways, including the Cisco PIX firewall, and Cisco IOS routers.
In the Remote Server field, enter the IP address or hostname of the VPN Concentrator to which this
Step 1
VPN 3002 hardware client connects. Note that to enter a hostname, a DNS server must be configured.
Check the IPSec over TCP box if you want to connect using IPSec over TCP. This feature must also be
Step 2
enabled on the VPN Concentrator to which this VPN 3002 connects.
Enter the IPSec over TCP port number. You can enter only one port. The port that you configure on this
Step 3
VPN 3002 must also be configured on the VPN Concentrator to which this VPN 3002 connects.
Note
Step 4
Check the Use Certificate box to use digital certificates for authentication. If you are using digital
certificates, there is no need to enter a group name and group password.
Step 5
Select a Certificate Transmission option. If you want the VPN 3002 to send the peer the identity
certificate and all issuing certificates (including the root certificate and any subordinate CA certificates),
click Entire certificate chain. If you want to send the peer only the identity certificate, click Identity
certificate only.
OL-2854-01
If you enter a well-known port, for example port 80 (HTTP) or port 443 (HTTPS), the system
displays a warning to notify you that the protocol associated with that port will no longer
work on the public interface, with the consequence that you can no longer use a browser to
manage the VPN 3002 through the public interface. To solve this problem, reconfigure the
HTTP/HTTPS management to different ports.
VPN 3002 Hardware Client Getting Started
Configuring IPSec
3-11
Advertisement
Table of Contents
