Document Outline

• Contents
• Preface
  • Prerequisites
  • Organization
  • Related Documentation
    • VPN 3002 Hardware Client Documentation
    • VPN 3000 Series Concentrator Documentation
    • VPN Client Documentation
    • Documentation on VPN Software Distribution CDs
    • Other References
  • Documentation conventions
    • Data Formats
  • Obtaining Documentation
    • World Wide Web
    • Documentation CD-ROM
    • Ordering documentation
    • Documentation feedback
  • Obtaining technical assistance
    • Cisco.com
    • Technical Assistance Center
      • Contacting TAC by using the Cisco TAC website
      • Contacting TAC by telephone
• Using the VPN 3002 Hardware Client Manager
  • VPN 3002 Hardware Client Browser Requirements
    • JavaScript and Cookies
    • Navigation Toolbar
    • Recommended PC Monitor/Display Settings
  • Connecting to the VPN 3002 Using HTTP
  • Installing the SSL Certificate in Your Browser
    • Installing the SSL certificate with Internet Explorer
      • Viewing Certificates with Internet Explorer
    • Installing the SSL Certificate with Netscape
      • Reinstallation
      • First-time Installation
      • Viewing Certificates with Netscape
  • Connecting to the VPN 3002 Using HTTPS
  • Configuring HTTP, HTTPS, and SSL Parameters
  • Logging into the VPN 3002 Hardware Client Manager
  • Interactive Hardware Client and Individual User Authentication
    • Interactive Hardware Client Authentication
    • Individual User Authentication
  • Logging In With Interactive Hardware Client and Individual User Authentication
  • Understanding the VPN 3002 Hardware Client Manager Window
  • Organization of the VPN 3002 Hardware Client Manager
  • Navigating the VPN 3002 Hardware Client Manager
• Configuration
  • Configuration
• Interfaces
  • Configuration | Interfaces
    • Interface
      • Ethernet 1 (Private), Ethernet 2 (Public)
      • DNS Server(s)
      • DNS Domain Name
    • Status
    • IP Address
    • Subnet Mask
      • MAC Address
      • Default Gateway
  • Configuration | Interfaces | Private
    • Disabled
    • Static IP Addressing
      • IP Address
      • Subnet Mask
      • MAC Address
      • Speed
      • Duplex
    • Apply/Cancel
      • Reminder:
  • Configuration | Interfaces | Public
    • Disabled
    • DHCP Client
    • PPPoE Client
      • PPPoE User Name
      • PPPoE Password
      • Verify PPPoE Password
    • Static IP Addressing
      • IP Address
      • Subnet Mask
      • MAC Address
      • Speed
      • Duplex
    • Apply / Cancel
      • Reminder:
• System Configuration
  • Configuration | System
• Servers
  • Configuration | System | Servers
  • Configuration | System | Servers | DNS
    • Enabled
    • Domain
    • Primary DNS Server
    • Secondary DNS Server
    • Tertiary DNS Server
    • Timeout Period
    • Timeout Retries
    • Apply / Cancel
      • Reminder:
• Tunneling
  • Configuration | System | Tunneling Protocols
  • Configuration | System | Tunneling Protocols | IPSec
    • Remote Server
    • Backup Servers
      • About Backup Servers
    • IPSec over TCP
    • IPSec over TCP Port
      • About IPSec over TCP
    • Use Certificate
    • Certificate Transmission
    • Group
      • Name
      • Password
      • Verify
    • User
      • Name
      • Password
      • Verify
• IP Routing
  • Configuration | System | IP Routing
  • Configuration | System | IP Routing | Static Routes
    • Static Routes
    • Add / Modify / Delete
      • Reminder:
  • Configuration | System | IP Routing | Static Routes | Add or Modify
    • Network Address
    • Subnet Mask
    • Metric
    • Destination
      • Destination Router Address
      • Interface
    • Add or Apply / Cancel
  • Configuration | System | IP Routing | Default Gateways
    • Default Gateway
    • Metric
    • Apply / Cancel
      • Reminder:
  • Configuration | System | IP Routing | DHCP
    • Enabled
    • Lease Timeout
    • Address Pool Start/End
    • Apply/Cancel
      • Reminder:
  • Configuration | System | IP Routing | DHCP Options
    • DHCP Option
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | IP Routing | DHCP Options | Add or Modify
    • DHCP Option
    • Option Value
    • Nonconfigurable DHCP Options
• Management Protocols
  • Configuration | System | Management Protocols
  • Configuration | System | Management Protocols | HTTP/HTTPS
    • About HTTP/HTTPS
    • Enable HTTP
    • Enable HTTPS
    • Enable HTTPS on Public
    • HTTP Port
    • HTTPS Port
    • Maximum Sessions
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Management Protocols | Telnet
    • Enable Telnet
    • Enable Telnet/SSL
    • Telnet Port
    • Telnet/SSL Port
    • Maximum Connections
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SNMP
    • Enable SNMP
    • SNMP Port
    • Maximum Queued Requests
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SNMP Communities
    • Community Strings
    • Add/Modify/Delete
      • Reminder:
    • Configuration | System | Management Protocols | SNMP Communities | Add or Modify
    • Community String
    • Add or Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SSL
    • Encryption Algorithms
    • Client Authentication
    • SSL Version
    • Generated Certificate Key Size
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Management Protocols | SSH
    • Enable SSH
    • Enable SSH on Public
    • SSH Port
    • Maximum Sessions
    • Key Regeneration Period
    • Encryption Algorithms
    • Apply / Cancel
      • Reminder:
  • Configuration | System | Management Protocols | XML
    • Enable XML
    • Enable HTTPS on Public
    • HTTPS IP Address
    • HTTPS Wildcard-mask
    • Enable SSH on Public
    • SSH IP Address
    • SSH Wildcard-mask
• Events
  • Event Class
  • Event Severity Level
  • Event Log
    • Event Log Data
  • Configuration | System | Events
  • Configuration | System | Events | General
    • Syslog Format
    • Severity to Log
    • Severity to Console
    • Severity to Syslog
    • Severity to Trap
    • Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Classes
    • Configured Event Classes
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Classes | Add or Modify
    • Class Name
    • Enable
    • Severity to Log
    • Severity to Console
    • Severity to Syslog
    • Severity to Trap
    • Add or Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Trap Destinations
    • Trap Destinations
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Trap Destinations | Add or Modify
    • Destination
    • SNMP Version
    • Community
    • Port
    • Add or Apply/Cancel
      • Reminder:
  • Configuration | System | Events | Syslog Servers
    • Syslog Servers
    • Add/Modify/Delete
      • Reminder:
  • Configuration | System | Events | Syslog Servers | Add or Modify
    • Syslog Server
    • Port
    • Facility
    • Add or Apply/Cancel
      • Reminder:
• General
  • Configuration | System | General
  • Configuration | System | General | Identification
    • System Name
    • Contact
    • Location
    • Apply / Cancel
      • Reminder:
  • Configuration | System | General | Time and Date
    • Current Time
    • New Time
    • Enable DST Support
    • Apply/Cancel
      • Reminder:
• Policy Management
  • Client Mode/PAT
    • Client Mode with Split Tunneling
    • VPN 3000 Series VPN Concentrator Settings Required for PAT
  • Network Extension Mode
    • Network Extension Mode with Split Tunneling
    • VPN 3000 Series Concentrator Settings Required for Network Extension Mode
    • Tunnel Initiation
      • Tunnel Initiation with Interactive Hardware Client Authentication
      • Data Initiation
  • Configuration | Policy Management
    • Traffic Management
  • Configuration | Policy Management | Traffic Management
    • PAT
  • Configuration | Policy Management | Traffic Management | PAT
    • Enable
  • Configuration | Policy Management | Traffic Management | PAT | Enable
    • PAT Enabled
    • Apply/Cancel
      • Reminder:
• Administration
  • Administration
  • Administration | Software Update
    • Current Software Revision
    • Browse...
    • Upload/Cancel
    • Software Update Progress
    • Software Update Success
    • Software Update Error
  • Administration | System Reboot
    • Action
    • Configuration
    • When to Reboot/Shutdown
    • Apply/Cancel
  • Administration | Ping
    • Address/Hostname to Ping
    • Ping/Cancel
    • Success (Ping)
      • Continue
    • Error (Ping)
  • Administration | Access Rights
  • Administration | Access Rights | Administrators
    • Administrator
    • Password
    • Verify
    • Enabled
    • Apply/Cancel
  • Administration | Access Rights | Access Settings
    • Session Idle Timeout
    • Session Limit
    • Encrypt Config File
    • Apply/Cancel
  • Administration | File Management
    • View (Save)
    • Delete
    • Swap Config Files
    • Config File Upload via HTTP
  • Administration | File Management | Swap Config Files
    • OK/Cancel
  • Administration | File Management | Config File Upload
    • Local Config File/Browse...
    • Upload/Cancel
    • File Upload Progress
    • File Upload Success
    • File Upload Error
  • Certificate Management
    • Enrolling and Installing Digital Certificates
      • Installing CA Certificates Automatically Using SCEP
      • Installing CA Certificates Manually
    • Enrolling and Installing Identity Certificates
      • Enrolling and Installing Identity Certificates Automatically Using SCEP
      • Enrolling and Installing Identity Certificates Manually
    • Obtaining SSL Certificates
    • Enabling Digital Certificates on the VPN 3002
    • Deleting Digital Certificates
  • Administration | Certificate Management
    • Certificate Authorities Table
      • Fields
    • Identity Certificates Table
    • SSL Certificate Table [ Generate ]
      • Fields
    • Enrollment Status Table
      • [Remove All:]
      • Fields
  • Administration | Certificate Management | Enroll
    • Identity Certificate
    • SSL Certificate
  • Administration | Certificate Management | Enroll | Certificate Type
    • Enroll via PKCS10 Request (Manual)
    • Enroll via SCEP at [Name of SCEP CA]
    • Install a New SA Using SCEP before Enrolling
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Enroll | Certificate Type | PKCS10
    • Fields
    • Enroll / Cancel
  • Administration | Certificate Management | Enrollment or Renewal | RequestGenerated
    • Go to Certificate Management
    • Go to Certificate Enrollment
    • Go to Certificate Installation
  • Administration | Certificate Management | Enroll | IdentityCertificate | SCEP
    • Fields
    • Enroll / Cancel
  • Administration | Certificate Management | Enroll | SSLCertificate | SCEP
    • Fields
    • Enroll
    • Cancel
  • Administration | Certificate Management | Install
    • Install CA Certificate
    • Install SSL Certificate with Private Key
    • Install Certificate Obtained via Enrollment
  • Administration | Certificate Management | Install | Certificate Obtained via Enrollment
    • Enrollment Status Table
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Install | Certificate Type
    • SCEP (Simple Certificate Enrollment Protocol)
    • Cut & Paste Text
    • Upload File from Workstation
    • << Go back and choose a different type of certificate
  • Administration | Certificate Management | Install | CACertificate | SCEP
    • URL
    • CA Descriptor
    • Retrieve / Cancel
  • Administration | Certificate Management | Install | Certificate Type | Cut and Paste Text
    • Certificate Text
    • Password
    • Install / Cancel
  • Administration | Certificate Management | Install | Certificate Type | Upload File from Workstation
    • Filename / Browse
    • Password
    • Install / Cancel
  • Administration | Certificate Management | View
    • Certificate Fields
    • Back
  • Administration | Certificate Management | ConfigureCACertificate
    • Certificate
    • SCEP Configuration
      • Enrollment URL
      • Polling Interval
      • Polling Limit
    • Apply / Cancel
  • Administration | Certificate Management | Renewal
    • Certificate
    • Renewal Type
    • Enrollment Method
    • Challenge Password
    • Verify Challenge Password
    • Renew / Cancel
  • Administration | Certificate Management | Activate or Re-Submit | Status
    • Status
    • Go to Certificate Management
    • Go to Certificate Enrollment
    • Go to Certificate Installation
  • Administration | Certificate Management | Delete
    • Fields
    • Yes / No
  • Administration | Certificate Management | ViewEnrollmentRequest
    • Enrollment Request Fields
    • Back
  • Administration | Certificate Management | CancelEnrollmentRequest
    • Fields
    • Yes / No
  • Administration | Certificate Management | DeleteEnrollmentRequest
    • Fields
    • Yes / No
• Monitoring
  • Monitoring | Routing Table
  • Monitoring | Filterable Event Log
    • Select Filter Options
    • Event Log Format
  • Monitoring | Live Event Log
    • Pause Display/Resume Display
    • Clear Display
    • Restart
    • Timer
  • Monitoring | System Status
    • Reset
    • Restore
    • Refresh
    • VPN Client Type
    • Bootcode Rev
    • Software Rev
    • Up Since
    • RAM Size
    • Disconnect Now
    • Connect Now
    • Assigned IP Address
    • Tunnel Established to
    • Duration
    • Security Associations
      • Type
      • Remote Address
      • Encryption
      • Authentication
      • Octets In
      • Octets Out
      • Packets In
      • Packets Out
      • Other
    • Front Panel
    • Back Panel
  • Monitoring | System Status | Private/Public Interface
    • Reset
    • Restore
    • Refresh
    • Back
    • Interface
    • IP Address
    • Status
    • Rx Unicast
    • Tx Unicast
    • Rx Multicast
    • Tx Multicast
    • Rx Broadcast
    • Tx Broadcast
  • Monitoring | User Status
    • Refresh
    • Cisco IP Phone Bypass Enabled/Disabled
    • Username
    • IP Address
    • MAC Address
    • Login Time
    • Duration
    • Actions
  • Monitoring | Statistics
  • Monitoring | Statistics | IPSec
    • Reset
    • Restore
    • Refresh
    • IKE (Phase 1) Statistics
      • Active Tunnels
      • Total Tunnels
      • Received Bytes
      • Sent Bytes
      • Received Packets
      • Sent Packets
      • Received Packets Dropped
      • Sent Packets Dropped
      • Received Notifies
      • Sent Notifies
      • Received Phase-2 Exchanges
      • Sent Phase-2 Exchanges
      • Invalid Phase-2 Exchanges Received
      • Invalid Phase-2 Exchanges Sent
      • Rejected Received Phase-2 Exchanges
      • Rejected Sent Phase-2 Exchanges
      • Phase-2 SA Delete Requests Received
      • Phase-2 SA Delete Requests Sent
      • Initiated Tunnels
      • Failed Initiated Tunnels
      • Failed Remote Tunnels
      • Authentication Failures
      • Decryption Failures
      • Hash Validation Failures
      • System Capability Failures
      • No-SA Failures
    • IPSec (Phase 2) Statistics
      • Active Tunnels
      • Total Tunnels
      • Received Bytes
      • Sent Bytes
      • Received Packets
      • Sent Packets
      • Received Packets Dropped
      • Received Packets Dropped (Anti-Replay)
      • Sent Packets Dropped
      • Inbound Authentications
      • Failed Inbound Authentications
      • Outbound Authentications
      • Failed Outbound Authentications
      • Decryptions
      • Failed Decryptions
      • Encryptions
      • Failed Encryptions
      • System Capability Failures
      • No-SA Failures
      • Protocol Use Failures
  • Monitoring | Statistics | HTTP
    • Reset
    • Restore
    • Refresh
    • Octets Sent/Received
    • Packets Sent/Received
    • Packets Sent Sockets/Sessions
      • Active
    • Peak
      • Total
    • HTTP Sessions
      • Login Name
      • IP Address
      • Login Time
      • Encryption
      • Octets Sent/Received
      • Packets Sent/Received
      • Sockets Active
      • Sockets Peak
      • Sockets Total
    • Max Connections
  • Monitoring | Statistics | Telnet
    • Reset
    • Restore
    • Refresh
    • Active Sessions
    • Attempted Sessions
    • Successful Sessions
    • Telnet Sessions
      • Client IP Address:Port
      • Inbound Octets Total
      • Inbound Octets Command
      • Inbound Octets Discarded
      • Outbound Octets Total
      • Outbound Octets Dropped
  • Monitoring | Statistics | DNS
    • Reset
    • Restore
    • Refresh
    • Requests
    • Responses
    • Timeouts
    • Server Unreachable
    • Other Failures
  • Monitoring | Statistics | SSL
    • Reset
    • Restore
    • Refresh
    • Unencrypted Inbound Octets
    • Encrypted Inbound Octets
    • Unencrypted Outbound Octets
    • Encrypted Outbound Octets
    • Total Sessions
    • Active Sessions
    • Max Active Sessions
  • Monitoring | Statistics | DHCP
    • Reset
    • Restore
    • Refresh
    • Active Leases
    • Maximum Active Leases
    • Timeouts
    • Pool Start
    • Pool End
    • Leased IP Address
    • Time Left
    • MAC Address
    • Host Name
  • Monitoring | Statistics | SSH
    • Reset
    • Restore
    • Refresh
    • Octets Sent/Received
    • Packets Sent/Received
    • Active Sessions
    • Maximum Sessions
    • Total Sessions
    • SSH Sessions
      • Login Name
      • Remote IP Address:Port
      • Login Time
      • Encryption
      • Octets Sent/Received
      • Packets Sent/Received
  • Monitoring | Statistics | NAT
    • Reset
    • Restore
    • Refresh
    • Packets In/Out
      • Translations Active
      • Translations Peak
      • Translations Total
    • NAT Sessions
      • Source IP Address/Port
      • Destination IP Address/Port
      • Translated IP Address/Port
      • Direction
      • Age
      • Type
      • Translated Bytes/Packets
  • Monitoring | Statistics | PPPoE
    • Reset
    • Restore
    • Refresh
    • User Name
    • Session ID
    • PPPoE Access Concentrator
      • MAC Address
      • Server Name
    • Duration
    • PADI Timeouts
    • PADR Timeouts
    • Multiple PADO Rx
    • PADT Rx
    • PADT Tx
    • Generic Errors Rx
    • Malformed Packets Rx
  • Monitoring | Statistics | MIB-II
  • Monitoring | Statistics | MIB-II | Interfaces
    • Reset
    • Restore
    • Refresh
    • Interface
    • Status
    • Unicast In
    • Unicast Out
    • Multicast In
    • Multicast Out
    • Broadcast In
    • Broadcast Out
  • Monitoring | Statistics | MIB-II | TCP/UDP
    • Reset
    • Restore
    • Refresh
    • TCP Segments Received
    • TCP Segments Transmitted
    • TCP Segments Retransmitted
    • TCP Timeout Min
    • TCP Timeout Max
    • TCP Connection Limit
    • TCP Active Opens
    • TCP Passive Opens
    • TCP Attempt Failures
    • TCP Established Resets
    • TCP Current Established
    • UDP Datagrams Received
    • UDP Datagrams Transmitted
    • UDP Errored Datagrams
    • UDP No Port
  • Monitoring | Statistics | MIB-II | IP
    • Reset
    • Restore
    • Refresh
    • Packets Received (Total)
    • Packets Received (Header Errors)
    • Packets Received (Address Errors)
    • Packets Received (Unknown Protocols)
    • Packets Received (Discarded)
    • Packets Received (Delivered)
    • Packets Forwarded
    • Outbound Packets Discarded
    • Outbound Packets with No Route
    • Packets Transmitted (Requests)
    • Fragments Needing Reassembly
    • Reassembly Successes
    • Reassembly Failures
    • Fragmentation Successes
    • Fragmentation Failures
    • Fragments Created
  • Monitoring | Statistics | MIB-II | ICMP
    • Reset
    • Restore
    • Refresh
    • Total Received/Transmitted
    • Errors Received/Transmitted
    • Destination Unreachable Received/Transmitted
    • Time Exceeded Received/Transmitted
    • Parameter Problems Received/Transmitted
    • Source Quench Received/Transmitted
    • Redirects Received/Transmitted
    • Echo Requests (PINGs) Received/Transmitted
    • Echo Replies (PINGs) Received/Transmitted
    • Timestamp Requests Received/Transmitted
    • Timestamp Replies Received/Transmitted
    • Address Mask Requests Received/Transmitted
    • Address Mask Replies Received/Transmitted
  • Monitoring | Statistics | MIB-II | ARP Table
    • Refresh
    • Interface
    • Physical Address
    • IP Address
    • Mapping Type
    • Action/Delete
  • Monitoring | Statistics | MIB-II | Ethernet
    • Reset
    • Restore
    • Refresh
    • Interface
    • Alignment Errors
    • FCS Errors
    • Carrier Sense Errors
    • SQE Test Errors
    • Frame Too Long Errors
    • Deferred Transmits
    • Single Collisions
    • Multiple Collisions
    • Late Collisions
    • Excessive Collisions
    • MAC Errors: Transmit
    • MAC Errors: Receive
    • Speed (Mbps)
    • Duplex
  • Monitoring | Statistics | MIB-II | SNMP
    • Reset
    • Restore
    • Refresh
    • Requests Received
    • Bad Version
    • Bad Community String
    • Parsing Errors
    • Silent Drops
    • Proxy Drops
• Using the Command-Line Interface
  • Accessing the Command-line Interface
    • Console Access
    • Telnet or Telnet/SSL access
  • Starting the Command-line Interface
  • Using the Command-line Interface
    • Choosing Menu Items
    • Entering Values
    • Navigating Quickly
      • Using Shortcut Numbers
      • Using Back and Home
    • Getting Help Information
    • Saving the Configuration File
    • Stopping the Command-line Interface
    • Understanding Access Rights
  • Menu Reference
    • Main Menu
    • 1 Configuration
      • 1.1 Configuration > Quick Configuration
      • 1.2 Configuration > Interface Configuration
      • 1.2.1 or 1.2.2 Configuration > Interface Configuration > Configure the Private/Public Interface
      • 1.3 Configuration > System Management
      • 1.3.1 Configuration > System Management > Servers
      • 1.3.2 Configuration > System Management > Tunneling Protocols
      • 1.3.3 Configuration > System Management > IP Routing
      • 1.3.4 Configuration > System Management > Management Protocols
      • 1.3.5 Configuration > System Management > Event Configuration
      • 1.3.6 Configuration > System Management > General Config
      • 1.4 Configuration > Policy Management
      • 1.4.1 Configuration > Policy Management > Traffic Management
    • 2 Administration
      • 2.1 Administration > Software Update
      • 2.2 Administration > System Reboot
      • 2.2.2 Administration > System Reboot > Schedule Reboot
      • 2.2.3 Administration > System Reboot > Schedule Shutdown
      • 2.3 Administration > Ping
      • 2.4 Administration > Access Rights
      • 2.4.1 Administration > Access Rights > Administrators
      • 2.4.2 Administration > Access Rights > Access Settings
      • 2.5 Administration > File Management
      • 2.5.5 Administration > File Management > Swap Configuration File
      • 2.6 Administration > Certificate Management
      • 2.6.2 Administration > Certificate Management > Installation
      • 2.6.3 Administration > Certificate Management > Certificate Authorities
      • 2.6.4 Administration > Certificate Management > Identity Certificates
      • 2.6.5 Administration > Certificate Management > SSL Certificate
    • 3 Monitoring
      • 3.1 Monitoring > Routing Table
      • 3.2 Monitoring > Event Log
      • 3.2.2 Monitoring > Event Log > View Event Log
      • 3.3 Monitoring > System Status
      • 3.4 Monitoring > User Status
      • 3.5 Monitoring > General Statistics
      • 3.4.1 Monitoring > General Statistics > Protocol Statistics
      • 3.4.2 Monitoring > General Statistics > Server Statistics
      • 3.4.3 Monitoring > General Statistics > MIB II Statistics
• Troubleshooting and System Errors
  • Files for Troubleshooting
    • Event Logs
    • Crash Dump File
    • Configuration Files
  • LED Indicators
    • VPN 3002 Front LEDs
    • VPN 3002 Rear LEDs
  • System Errors
  • Settings on the VPN Concentrator
  • VPN 3002 Hardware Client Manager Errors
    • Invalid Login or Session Timeout
    • Manager Logs Out
    • Incorrect Display
    • Error Message
    • Not Allowed Message
    • Not Found
    • Microsoft Internet Explorer Script Error: No such interface supported
  • Command-line Interface Errors
• Index