Cisco Systems VPN 3002 User Manual Page 64
- Page / 282
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
6-4
VPN 3002 Hardware Client Reference
OL-1893-01
Chapter6 Tunneling
Configuration | System | Tunneling Protocols | IPSec
Note If you are using hostnames, it is wise to have backup DNS and WINS servers on a separate network
from that of the primary DNS and WINS servers. Otherwise, if clients behind the VPN 3002 obtain
DNS and WINS information from the VPN 3002 through DHCP, and the connection to the primary
server is lost, and the backup servers have different DNS and WINS information, clients cannot be
updated until the DHCP lease expires.
About Backup Servers
IPSec backup servers let a VPN 3002 connect to the central site when its primary central-site VPN
Concentrator is unavailable. You configure backup servers for a VPN 3002 either on the VPN 3002, or
on a group basis at the central-site VPN Concentrator. If you configure backup servers on the primary
central-site VPN Concentrator, that VPN Concentrator pushes the backup server policy to the VPN 3002
hardware clients in the group. By default, the policy is to use the backup server list configured on the
VPN 3002. Alternatively, the VPN Concentrator can push a policy that supplies a list of backup servers
in order of priority, replacing the backup server list on the VPN 3002 if one is configured. It can also
disable the feature and clear the backup server list on the VPN 3002 if one is configured.
Figure 6-3 illustrates how the backup server feature works.
Figure 6-3 Backup Server Implementation
XYZ corporation has large sites in three cities: San Jose, California; Austin, Texas; and Boston,
Massachusetts. They just opened a regional sales office in Fargo, North Dakota. To provide access to the
corporate network from Fargo, they use a VPN 3002 that connects to a VPN 3080 in San Jose (1). If the
VPN 3002 is unable to contact the corporate network, Fargo cannot place orders. The IPSec backup
server feature lets the VPN 3002 connect to one of several sites, in this case using Austin (2) and Boston
(3) as backup servers, in that order.
San Jose
VPN 3080
Concentrator
Austin
VPN 3000
Concentrator
Fargo
VPN 3002
Hardware Client
Boston
VPN 3000
Concentrator
68158
1
2
3
- VPN 3002 Hardware Client 1
- Reference 1
- CONTENTS 3
- Contents 4
- 78-13782-01 4
- Prerequisites 9
- OL-1893-01 10
- Organization 10
- Related Documentation 11
- Documentation conventions 12
- Obtaining Documentation 13
- Ordering documentation 14
- Documentation feedback 14
- Cisco.com 14
- Technical Assistance Center 15
- JavaScript and Cookies 18
- Navigation Toolbar 18
- Click Next to continue 22
- Trusted 25
- Reinstallation 26
- First-time Installation 26
- Cisco VPN 3002 10.10.147.2 29
- Step 1 Bring up the browser 32
- Authentication 35
- Click the Connect Now button 36
- Step 2 Click Connect 37
- Chapter 2 Configuration 46
- Interfaces 47
- Subnet Mask 49
- Disabled 50
- Static IP Addressing 50
- DHCP Client 52
- PPPoE Client 52
- System Configuration 55
- Configuration 56
- Primary DNS Server 58
- Secondary DNS Server 58
- Tertiary DNS Server 58
- Timeout Period 59
- Timeout Retries 59
- Chapter 5 Servers 60
- Tunneling 61
- Chapter6 Tunneling 62
- Remote Server 63
- Backup Servers 63
- About Backup Servers 64
- IPSec over TCP 65
- IPSec over TCP Port 65
- Use Certificate 66
- Certificate Transmission 66
- IP Routing 69
- Static Routes 70
- Add / Modify / Delete 70
- Destination 72
- Add or Apply / Cancel 72
- Default Gateway 73
- Lease Timeout 74
- Address Pool Start/End 74
- DHCP Option 75
- Nonconfigurable DHCP Options 77
- Chapter 7 IP Routing 78
- Management Protocols 79
- About HTTP/HTTPS 80
- Enable HTTP 80
- Enable Telnet 82
- Enable Telnet/SSL 83
- Telnet Port 83
- Telnet/SSL Port 83
- Maximum Connections 83
- Enable SNMP 84
- SNMP Port 84
- Maximum Queued Requests 84
- SNMP Communities 85
- Community Strings 86
- Communities 86
- Community String 87
- Encryption Algorithms 89
- Client Authentication 89
- SSL Version 90
- Enable XML 94
- Enable HTTPS on Public 94
- HTTPS IP Address 95
- HTTPS Wildcard-mask 95
- Enable SSH on Public 95
- SSH IP Address 95
- SSH Wildcard-mask 95
- Event Class 97
- Event Severity Level 99
- Event Log 100
- Chapter 9 Events 101
- Syslog Format 102
- Severity to Syslog 103
- Severity to Log 103
- Severity to Console 103
- Severity to Trap 104
- Apply/Cancel 104
- Configured Event Classes 105
- Add/Modify/Delete 105
- Class Name 106
- Add or Apply/Cancel 107
- Trap Destinations 108
- Add or Modify 109
- Syslog Servers 111
- Syslog Server 112
- Facility 112
- System Name 116
- Location 116
- Apply / Cancel 116
- Current Time 117
- New Time 117
- Enable DST Support 117
- Reminder: 118
- Policy Management 119
- Network Extension Mode 120
- group name and 121
- Tunnel Initiation 122
- Traffic Management 123
- Management 124
- PAT 124
- PAT Enabled 125
- Administration 127
- icon in 128
- Current Software Revision 129
- Browse 129
- Upload/Cancel 129
- Software Update Progress 130
- Software Update Success 130
- Software Update Error 130
- Configuration 132
- Administration 133
- Address/Hostname to Ping 134
- Ping/Cancel 134
- Success (Ping) 134
- Error (Ping) 134
- Administrator 136
- Password 136
- Session Idle Timeout 137
- Session Limit 137
- Encrypt Config File 137
- View (Save) 138
- Swap Config Files 139
- Config File Upload via HTTP 139
- OK/Cancel 139
- Local Config File/Browse 140
- File Upload Progress 140
- File Upload Success 141
- File Upload Error 141
- Certificate Management 142
- (See Figure 12-28.) 151
- Obtaining SSL Certificates 154
- Deleting Digital Certificates 156
- Certificate Authorities Table 158
- Identity Certificates Table 158
- Enrollment Status Table 161
- Identity Certificate 163
- SSL Certificate 163
- Type 165
- Renewal 166
- Identity Certificate 167
- SSL Certificate 168
- Install CA Certificate 170
- Obtained via Enrollment 171
- Cut & Paste Text 172
- Upload File from Workstation 172
- CA Certificate 173
- Type 174
- Filename / Browse 175
- Install / Cancel 175
- Certificate Fields 177
- Configure CA Certificate 179
- Re-Submit 182
- View Enrollment Request 184
- Enrollment Request Fields 185
- Cancel Enrollment Request 186
- Delete Enrollment Request 187
- Yes / No 188
- Monitoring 189
- Monitoring 190
- Chapter 13 Monitoring 191
- Select Filter Options 192
- Event Log Format 193
- Monitoring 194
- Pause Display/Resume Display 195
- Clear Display 195
- Monitoring 196
- Tunnel Established to 198
- Duration 198
- Security Associations 198
- Front Panel 199
- Back Panel 199
- Monitoring 202
- Monitoring 203
- IKE (Phase 1) Statistics 205
- IPSec (Phase 2) Statistics 208
- System Capability Failures 210
- No-SA Failures 210
- Protocol Use Failures 210
- HTTP Sessions 212
- Max Connections 212
- Active Sessions 213
- Attempted Sessions 214
- Successful Sessions 214
- Telnet Sessions 214
- Monitoring 215
- Monitoring 216
- Active Leases 218
- Maximum Active Leases 218
- Monitoring 220
- Packets Sent/Received 221
- Maximum Sessions 221
- Total Sessions 221
- SSH Sessions 221
- Monitoring 222
- NAT Sessions 223
- Translated Bytes/Packets 224
- MAC Address 225
- Server Name 225
- Generic Errors Rx 226
- Malformed Packets Rx 226
- Interface 228
- TCP Segments Received 230
- -1 means there 231
- Total Received/Transmitted 236
- Physical Address 240
- IP Address 240
- Mapping Type 240
- Action/Delete 240
- Excessive Collisions 243
- MAC Errors: Transmit 243
- MAC Errors: Receive 243
- Speed (Mbps) 243
- Requests Received 244
- Bad Version 244
- Bad Community String 245
- Parsing Errors 245
- Silent Drops 245
- Proxy Drops 245
- Console Access 247
- Telnet or Telnet/SSL access 248
- Choosing Menu Items 249
- Entering Values 249
- Navigating Quickly 250
- Getting Help Information 251
- Saving the Configuration File 252
- Understanding Access Rights 252
- Menu Reference 253
- 2 Administration 255
- 3 Monitoring 258
- 3.2 Monitoring > Event Log 259
- Files for Troubleshooting 261
- LED Indicators 262
- System Errors 263
- Manager Logs Out 266
- Incorrect Display 267
- Error Message 267
- Not Allowed Message 268
- Not Found 269
- Command-line Interface Errors 270
- Numerics 271
- CRSHDUMP.TXT file A-1 273
Related products and manuals for Software manuals Cisco Systems VPN 3002
(10 pages)© 2020, manymanuals.com. All rights reserved. | 1.422 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals