Cisco CVPN3015-NR - VPN Concentrator 3015 Manual de usuario

Corporate Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 526-4100

VPN 3000 Series Concentrator

Getting Started

Release 4.7

August 2005

Customer Order Number: 78-15733

Text Part Number: 78-15733-03

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

VPN 3000 Series Concentrator Getting Started

CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and

iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified

Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast,

EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream,

Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Pa ck et , PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare,

SlideCast, SMARTnet, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States

and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship

between Cisco and any other company. (0601R)

iii

VPN 3000 Series Concentrator Getting Started

78-15413-01

CONTENTS

Preface v

Audience v

Organization v

Related Documentation vi

Conventions viii

Obtaining Documentation x

Obtaining Technical Assistance xi

Obtaining Additional Publications and Information xiii

CHAPTER

1Understanding the VPN 3000 Concentrator 1-1

Hardware Features 1-2

Software Features 1-3

How the VPN Concentrator Works 1-7

Where the VPN Concentrator Fits in Your Network 1-8

Physical Specifications 1-9

CHAPTER

2Installing and Powering Up the VPN Concentrator 2-1

Preparing to Install 2-1

Unpacking 2-4

Installing the VPN Concentrator Hardware 2-5

Connecting Hardware 2-9

Powering Up 2-12

Beginning Quick Configuration 2-13

CHAPTER

3Using the VPN Concentrator Manager for Quick Configuration 3-1

Logging in to the VPN Concentrator Manager 3-2

Starting Quick Configuration 3-3

Configuring IP Interfaces 3-4

Configuring System Information 3-8

Configuring Tunneling Protocols and Options 3-10

Configuring Address Assignment 3-11

Configuring Authentication 3-12

Contents

VPN 3000 Series Concentrator Getting Started

78-15413-01

Configuring the Internal Server User Database 3-17

Configuring the IPSec Group 3-18

Changing Admin Password 3-19

Finishing Quick Configuration 3-20

Saving the Active Configuration 3-21

What Next? 3-21

Using Other VPN Concentrator Manager Functions 3-22

Understanding the VPN Concentrator Manager Window 3-23

CHAPTER

4Using the Command-Line Interface for Quick Configuration 4-1

Configuring Ethernet Interfaces 4-2

Configuring System Information 4-5

Configuring Tunneling Protocols and Options 4-6

Configuring Address Assignment 4-8

Configuring Authentication 4-10

Configuring the IPSec Group 4-17

Changing the Admin Password 4-18

Completing Quick Configuration 4-19

Saving the Active Configuration 4-19

Exiting the CLI 4-19

What Next? 4-20

CHAPTER

5Testing the VPN Concentrator 5-1

VPN Concentrator Configuration Settings 5-1

Windows 95 PC Client Configuration 5-2

Testing the VPN Connection 5-3

APPENDIX

ATroubleshooting and System Errors A-1

APPENDIX

BCopyrights, Licenses, and Notices B-1

NDEX

vii

VPN 3000 Series Concentrator Getting Started

78-15733-03

Preface

VPN 3000 Series Concentrator Getting Started provides information to take you from unpacking and

installing the VPN 3000 Concentrator through quick configuration (configuring the minimal parameters

to make it operational). You can perform quick configuration from a console with the menu-based

command-line interface, or you can use the HTML-based VPN Concentrator Manager with a browser.

This guide describes both methods, and we recommend the latter for ease of use.

Audience

We assume you are an experienced system administrator or network administrator with appropriate

education and training, who knows how to install, configure, and manage internetworking systems.

However, virtual private networks and VPN devices might be new to you. You should be familiar with

Windows system configuration and management, and you should be familiar with Microsoft Internet

Explorer, Netscape Navigator or Communicator, or Mozilla browsers.

Organization

This guide is organized as follows:

Chapter Title Description

Chapter 1 Understanding the VPN 3000

Concentrator

Summarizes the hardware and software features

and operation. If you are familiar with VPN

devices, you can skip this chapter.

Chapter 2 Installing and Powering Up

the VPN Concentrator

Explains how to prepare for, unpack, install, and

power up the VPN Concentrator, and how to begin

quick configuration. Once you have completed the

steps in this chapter, you can use either Chapter 3

or Chapter 4 to complete quick configuration.

Chapter 3 Using the VPN Concentrator

Manager for Quick

Configuration

Explains how to complete quick configuration of

the system using the VPN Concentrator Manager

with a browser. We recommend this method.

Chapter 4 Using the Command-Line

Interface for Quick

Configuration

Explains how to complete quick configuration of

the system using the command-line interface from

the console or a Telnet session.

viii

VPN 3000 Series Concentrator Getting Started

78-15733-03

Preface

Related Documentation

VPN 3002 Hardware Client Documentation

The VPN 3002 Hardware Client Reference provides details on all the functions available in the

VPN 3002 Hardware Client Manager. This manual is online only.

The VPN 3002 Hardware Client Getting Started manual provides information to take you from

unpacking and installing the VPN 3002, through configuring the minimal parameters to make it

operational (called Quick Configuration). This manual is available only online.

The VPN 3002 Hardware Client Quick Start Card summarizes the information for quick configuration.

This quick reference card is provided with the VPN 3002 and is also available online.

The VPN 3002 Hardware Client Basic Information sticky label summarizes information for quick

configuration. It is provided with the VPN 3002 and you can also print it from the online version; you

can affix the label to the VPN 3002.

Documentation on VPN Software Distribution CDs

The VPN 3000 Series Concentrator and VPN 3002 Hardware Client documentation are provided on the

VPN 3000 Concentrator software distribution CD-ROM in PDF format. The VPN Client documentation

is included on the VPN Client software distribution CD-ROM, also in PDF format. To view the latest

versions on the Cisco web site, click the Support icon on the toolbar at the top of the VPN Concentrator

Manager, Hardware Client Manager, or Client window. To open the documentation, you need Acrobat

Reader 3.0 or later; version 4.5 is included on the Cisco VPN 3000 Concentrator software distribution

CD-ROM and on the VPN Client software distribution CD-ROM.

Other References

Other useful references include:

•Cisco Systems, Dictionary of Internetworking Terms and Acronyms. Cisco Press: 2001.

•Virtual Private Networking: An Overview. Microsoft Corporation: 1999. (Available from Microsoft

website.)

•www.ietf.org for Internet Engineering Task Force (IETF) Working Group drafts on IP Security

Protocol (IPSec).

•www.whatis.com, a web reference site with definitions for computer, networking, and data

communication terms.

VPN 3000 Series Concentrator Getting Started

78-15733-03

Preface

Conventions

This document uses the following conventions:

Notes use the following conventions:

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the

publication.

Tips use the following conventions:

Tip Means the following are useful tips.

Cautions use the following conventions:

Caution Means reader be careful. Cautions alert you to actions or conditions that could result in equipment

damage or loss of data.

Warnings use the following conventions:

Warning

This warning symbol means danger. You are in a situation that could cause bodily injury. Before you

work on any equipment, you must be aware of the hazards involved with electrical circuitry and

familiar with standard practices for preventing accidents.

Convention Description

boldface font Commands and keywords are in boldface.

italic font Arguments for which you supply values are in italics.

screen font Terminal sessions and information the system displays

are in screen font.

boldface screen

font

Information you must enter is in boldface screen font.

^ The symbol ^ represents the key labeled Control—for

example, the key combination ^D in a screen display

means hold down the Control key while you press the D

key.

VPN 3000 Series Concentrator Getting Started

78-15733-03

Preface

Obtaining Documentation

Data Formats

As you configure and manage the system, enter data in the following formats unless the instructions

indicate otherwise:

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several

ways to obtain technical assistance and other technical resources. These sections explain how to obtain

technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

You can access the Cisco website at this URL:

http://www.cisco.com

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Type of Data Format

IP Addresses IP addresses use 4-byte dotted decimal notation (for example, 192.168.12.34);

as the example indicates, you can omit leading zeros in a byte position.

Subnet Masks and

Wildcard Masks

Subnet masks use 4-byte dotted decimal notation (for example,

255.255.255.0). Wildcard masks use the same notation (for example,

0.0.0.255); as the example illustrates, you can omit leading zeros in a byte

position.

MAC Addresses MAC addresses use 6-byte hexadecimal notation (for example,

00.10.5A.1F.4F.07).

Hostnames Hostnames use legitimate network hostname or end-system name notation (for

example, VPN01). Spaces are not allowed. A hostname must uniquely identify

a specific system on a network.

Text Strings Text strings use upper- and lower-case alphanumeric characters. Most text

strings are case-sensitive (for example, simon and Simon represent different

usernames).

Filenames Filenames on the VPN Concentrator follow the DOS 8.3 naming convention:

a maximum of eight characters for the name, plus a maximum of three

characters for an extension. For example, LOG00007.TXT is a legitimate

filename. The VPN Concentrator always stores filenames in uppercase.

Port Numbers Port numbers use decimal numbers from 0 to 65535. No commas or spaces are

permitted in a number.

xii

VPN 3000 Series Concentrator Getting Started

78-15733-03

Preface

Obtaining Documentation

Product Documentation DVD

Cisco documentation and additional literature are available in the Product Documentation DVD package,

which may have shipped with your product. The Product Documentation DVD is updated regularly and

may be more current than printed documentation.

The Product Documentation DVD is a comprehensive library of technical product documentation on

portable media. The DVD enables you to access multiple versions of hardware and software installation,

configuration, and command guides for Cisco products and to view technical documentation in HTML.

With the DVD, you have access to the same documentation that is found on the Cisco website without

being connected to the Internet. Certain products also have .pdf versions of the documentation available.

The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com

users (Cisco direct customers) can order a Product Documentation DVD (product number

DOC-DOCDVD=) from the Ordering tool or Cisco Marketplace.

Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/

Cisco Marketplace:

http://www.cisco.com/go/marketplace/

Ordering Documentation

Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product

Documentation Store in the Cisco Marketplace at this URL:

http://www.cisco.com/go/marketplace/

Cisco will continue to support documentation orders using the Ordering tool:

•Registered Cisco.com users (Cisco direct customers) can order documentation from the

Ordering tool:

http://www.cisco.com/en/US/partner/ordering/

•Instructions for ordering documentation using the Ordering tool are at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

•Nonregistered Cisco.com users can order documentation through a local account representative by

calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in

North America, by calling 1 800 553-NETS (6387).

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Hardware de red de Cisco

Cisco

Cisco ISA 3000 Guía de inicio rápido

Cisco

Cisco NSS2000 - Gigabit Storage System Chassis Cómo utilizar

Cisco

Cisco WAE-674-K9 - Wide Area Application Engine... Manual

Cisco

Cisco 8540 - Catalyst Campus Switch Router Modular Expansion... Manual de usuario

Cisco

Cisco AIR-BR1410A-A-K9 - Aironet 1410 Wireless... Guía de referencia rápida

Cisco

Cisco WAVE-574-K9 - Wide Area Virtualization Engine... Manual

Cisco

Cisco ASR 5500 Manual de usuario

Cisco

Cisco IPS 7.1 Manual de usuario

Cisco

Cisco ONS 15216-MD-40-ODD Manual de usuario

Cisco

Cisco 1230AG - Aironet - Wireless Access Point Manual de usuario

Cisco

Cisco AIR-WLC2106-K9 - Wireless LAN Controller... Manual de usuario

Cisco

Cisco ONS 15600 Manual de usuario

Cisco

Cisco UCS 6248 UP Manual de usuario

Cisco

Cisco 8011-2X2XP4L Manual

Cisco

Cisco Firepower 1010 Manual de usuario

Cisco

Cisco Mc3810 - 16MB Flash Memory Guía rápida

Cisco

Cisco ONS 15310-MA SDH Manual

Cisco

Cisco RSP7000 Manual de instrucciones

Cisco

Cisco NCS 2006 Manual

Cisco

Cisco Firepower 2130 Guía de mantenimiento y servicio

Cisco

Cisco Firepower 1100 Series Manual

Cisco

Cisco linksys PLTK300 Manual de usuario

Cisco

Cisco GS7000 Instrucciones de funcionamiento

Cisco

Cisco Cisco ONS 15600 SDH Manual de usuario

Manuales populares de Hardware de red de otras marcas

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manual de usuario

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manual de usuario

Yudor

Yudor YDS-16 Manual de usuario

D-Link

D-Link ShareCenter DNS-320L Manual de usuario

Samsung

Samsung ES1642dc Instrucciones de uso

Honeywell Home

Honeywell Home LTEM-PV Instrucciones de montaje

evertz

evertz 7700 Series Manual de usuario

D-Link

D-Link ShareCenter DNS-343 Manual de usuario

Asante

Asante AsanteBridge 1012 Manual de usuario

FireBrick

FireBrick FB2700 Manual de usuario

Audiovox Electronics

Audiovox Electronics ARWH2T Manual de usuario

ADC

ADC DSX-1 Manual

NetComm

NetComm NF2 Manual de usuario

Alcatel-Lucent

Alcatel-Lucent 5620 Manual de usuario

Dell EMC

Dell EMC XC6420 Series Manual de usuario

Lanner

Lanner NCA-1020A Manual de usuario

Allied Telesis

Allied Telesis AT-TN121-A Manual de usuario

Arista

Arista CCA-ETM-Q12 Manual de usuario