Cisco 3002 - VPN Hardware Client Specifikace Strana 293
- Strana / 318
- Tabulka s obsahem
- ŘEŠENÍ PROBLÉMŮ
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
A-1
VPN 3002 Hardware Client Reference, Release 4.0
OL-3813-01
APPENDIX
A
IKE Proposals
IKE proposals are sets of parameters for Phase I IPSec negotiations. During Phase 1, the two peers
establish a secure tunnel within which they then negotiate the Phase 2 parameters.
You configure IKE proposals on the VPN Concentrator, not on the VPN 3002. The VPN Concentrator
software includes a set of preconfigured IKE proposals active by default, and a second preconfigured set
inactive by default. You can configure additional IKE proposals to a maximum of 150. On the VPN
Concentrator, see Configuration | System | Tunneling Protocols | IPSec | IKE Proposals.
Valid IKE Proposals
Table A-1 describes IKE proposals that are valid for the VPN 3002 Hardware Client. Use this
information to configure IKE proposals for the VPN 3002. For instructions about configuring IKE
proposals, see the section, “Configuration | System | Tunneling Protocols | IPSec| IKE Proposals | Add,
Modify, or Copy” in the Tunneling chapter of the VPN 3000 Series Concentrator
Reference Volume I.
Table A-1 Valid VPN 3002 Hardware Client IKE Proposals
Proposal Name
Authentication
Mode
Authentication
Algorithm
Encryption
Algorithm
Diffie- Hellman
Group
CiscoVPNClient-3DES-MD5 Preshared Keys
(XAUTH)
MD5/HMAC-128 3DES-168 Group 2
(1024 bits)
CiscoVPNClient-3DES-SHA
Preshared Keys
(XAUTH)
SHA/HMAC-160 3DES-168 Group 2
(1024 bits)
CiscoVPNClient-DES-MD5
Preshared Keys
(XAUTH)
MD5/HMAC-128 DES-56 Group 2
(1024 bits)
CiscoVPNClient-AES128-MD5
Preshared Keys
(XAUTH)
MD5/HMAC-128 AES-128 Group 2
(1024 bits)
CiscoVPNClient-AES128-SHA
Preshared Keys
(XAUTH)
SHA/HMAC-160 AES-128 Group 2
(1024 bits)
CiscoVPNClient-AES192-MD5
Preshared Keys
(XAUTH)
MD5/HMAC-128 AES-192 Group 2
(1024 bits)
CiscoVPNClient-AES192-SHA
Preshared Keys
(XAUTH)
SHA/HMAC-160 AES-192 Group 2
(1024 bits)
- VPN 3002 Hardware Client 1
- Reference, Release 4.0 1
- CONTENTS 3
- 2 Configuration 2-1 4
- 3 Interfaces 3-1 4
- 4 System Configuration 4-1 5
- 5 Servers 5-1 5
- 6 Tunneling 6-1 5
- 7 IP Routing 7-1 6
- 8 Management Protocols 8-1 7
- 9 Events 9-1 8
- 10 General 10-1 9
- 11 Policy Management 11-1 9
- 12 Administration 12-1 10
- Contents 11
- 13 Monitoring 13-1 14
- A IKE Proposals A-1 24
- Prerequisites 27
- Organization 27
- Related Documentation 29
- Documentation conventions 30
- Data Formats 31
- Obtaining Documentation 32
- Cisco.com 33
- Technical Assistance Center 33
- Cisco TAC Web Site 34
- Cisco TAC Escalation Center 34
- JavaScript and Cookies 36
- Navigation Toolbar 36
- Click Next to continue 40
- Trusted 43
- Reinstallation 44
- First-time Installation 44
- Step 1 Bring up the browser 50
- Authentication 53
- Chapter 2 Configuration 64
- Interfaces 65
- Subnet Mask 67
- Disabled 68
- Static IP Addressing 68
- DHCP Client 70
- PPPoE Client 70
- IPSec Fragmentation Policy 72
- Chapter 3 Interfaces 74
- System Configuration 75
- Configuration 76
- Primary DNS Server 78
- Secondary DNS Server 78
- Tertiary DNS Server 78
- Timeout Period 79
- Timeout Retries 79
- Chapter 5 Servers 80
- Tunneling 81
- Chapter 6 Tunneling 82
- Remote Easy VPN Server 83
- Backup Easy VPN Servers 84
- Alert when disconnecting 86
- IPSec over TCP 86
- IPSec over TCP Port 86
- Use Certificate 87
- Certificate Transmission 87
- IP Routing 89
- Static Routes 90
- Add / Modify / Delete 90
- Network Address 91
- Default Gateway 93
- Lease Timeout 94
- Address Pool Start/End 94
- DHCP Option 95
- Option Value 96
- Nonconfigurable DHCP Options 97
- Chapter 7 IP Routing 98
- Management Protocols 99
- About HTTP/HTTPS 100
- Reminder: 101
- Enable Telnet 102
- Maximum Connections 103
- Apply / Cancel 103
- Enable Telnet/SSL 103
- Telnet Port 103
- Telnet/SSL Port 103
- Enable SNMP 104
- SNMP Port 104
- Maximum Queued Requests 104
- Communities 105
- Communities 106
- Community String 107
- Add or Apply / Cancel 107
- OL-3813-01 108
- Encryption Protocols 109
- Client Authentication 109
- SSL Version 110
- Apply/Cancel 110
- Enable SCP 113
- Enable HTTPS on Public 114
- Enable SSH on Public 115
- Event Class 117
- Chapter 9 Events 118
- Event Severity Level 119
- Event Log 120
- Syslog Format 122
- Severity to Log 123
- Severity to Console 123
- Severity to Syslog 123
- Severity to Trap 124
- Configured Event Classes 125
- Add/Modify/Delete 125
- Class Name 126
- Add or Apply/Cancel 127
- Trap Destinations 128
- Destination 129
- SNMP Version 129
- Community 129
- Syslog Servers 131
- Syslog Server 132
- Facility 132
- System Name 136
- Location 136
- Current Time 137
- New Time 137
- Enable DST Support 137
- Policy Management 139
- Certificate Validation 140
- About PAT (Client Mode) 140
- About Network Extension Mode 141
- group name and 142
- Tunnel Initiation 143
- Data Initiation 144
- 145
- Distinguished Name Component 147
- Administration 149
- icon in 150
- Current Software Revision 151
- Browse 151
- Upload/Cancel 151
- Software Update Progress 152
- Software Update Success 152
- Software Update Error 152
- Configuration 154
- Administration 155
- Address/Hostname to Ping 156
- Ping/Cancel 156
- Success (Ping) 156
- Error (Ping) 156
- Administrator 158
- Password 158
- Session Idle Timeout 160
- Session Limit 160
- Config File Encryption 160
- View (Save) 161
- Swap Config Files 162
- Config File Upload via HTTP 162
- OK/Cancel 162
- Local Config File/Browse 163
- File Upload Progress 163
- File Upload Success 164
- File Upload Error 164
- Certificate Management 165
- About the Documentation 166
- Obtaining SSL Certificates 178
- Deleting Digital Certificates 179
- Certificate Authorities Table 182
- Identity Certificates Table 182
- Enrollment Status Table 185
- Identity Certificate 187
- SSL Certificate 187
- Type 189
- Enroll / Cancel 192
- Renewal 193
- Identity Certificate 194
- SSL Certificate 195
- Install CA Certificate 197
- Obtained via Enrollment 198
- Cut & Paste Text 199
- Upload File from Workstation 199
- CA Certificate 200
- Type 201
- Filename / Browse 202
- Install / Cancel 202
- Certificate Fields 204
- Configure CA Certificate 206
- Re-Submit 209
- View Enrollment Request 211
- Enrollment Request Fields 212
- Cancel Enrollment Request 213
- Delete Enrollment Request 214
- Yes / No 215
- Monitoring 217
- Monitoring 218
- Select Filter Options 219
- Chapter 13 Monitoring 220
- Event Log Format 221
- Monitoring 222
- Pause Display/Resume Display 223
- Clear Display 223
- Monitoring 224
- Tunnel Established to 226
- Duration 226
- Tunnel Type 226
- Security Associations 226
- Front Panel 227
- Back Panel 227
- System Memory Summary 228
- Total Memory 228
- Memory Status 228
- Memory Detail Report 229
- Tx Multicast 233
- Rx Broadcast 233
- Tx Broadcast 233
- Monitoring 234
- Monitoring 235
- IKE (Phase 1) Statistics 237
- IPSec (Phase 2) Statistics 240
- System Capability Failures 242
- No-SA Failures 242
- Protocol Use Failures 242
- HTTP Sessions 244
- Max Connections 244
- Active Sessions 245
- Attempted Sessions 246
- Successful Sessions 246
- Telnet Sessions 246
- Monitoring 247
- Monitoring 248
- Active Leases 250
- Maximum Active Leases 250
- Monitoring 252
- Packets Sent/Received 253
- Maximum Sessions 253
- Total Sessions 253
- SSH Sessions 253
- Monitoring 254
- NAT Sessions 255
- Translated Bytes/Packets 256
- MAC Address 257
- Server Name 257
- Multiple PADO Rx 258
- Generic Errors Rx 258
- Malformed Packets Rx 258
- Interface 260
- TCP Segments Received 262
- -1 means there 263
- Total Received/Transmitted 268
- Physical Address 272
- IP Address 272
- Mapping Type 272
- Action/Delete 272
- Alignment Errors 273
- MAC Errors: Transmit 275
- MAC Errors: Receive 275
- Speed (Mbps) 275
- Requests Received 276
- Bad Version 276
- Bad Community String 277
- Parsing Errors 277
- Silent Drops 277
- Proxy Drops 277
- Console Access 279
- Telnet or Telnet/SSL access 280
- Choosing Menu Items 281
- Entering Values 281
- Navigating Quickly 282
- Getting Help Information 283
- Saving the Configuration File 284
- Understanding Access Rights 284
- Menu Reference 285
- 2 Administration 287
- 3 Monitoring 290
- 3.2 Monitoring > Event Log 291
- IKE Proposals 293
- AppendixA IKE Proposals 294
- Valid IKE Proposals 294
- Appendix A IKE Proposals 295
- Files for Troubleshooting 297
- LED Indicators 298
- System Errors 299
- Manager Logs Out 302
- Incorrect Display 303
- Error Message 303
- Not Allowed Message 304
- Not Found 305
- Command-line Interface Errors 306
- Numerics 307
Související produkty a manuály pro Sítě Cisco 3002 - VPN Hardware Client
Sítě Cisco WMP110 Uživatelský manuál
(20 stránky)
(20 stránky)
Sítě Cisco 3745 Instalační příručka
(28 stránky)
(28 stránky)
Sítě Cisco 12012 Uživatelský manuál
(6 stránky)
(6 stránky)
Sítě Cisco WAE-611-K9 Uživatelský manuál
(28 stránky)
(28 stránky)
Sítě Cisco ONS 15327 Specifikace
(334 stránky)
(334 stránky)
Sítě Cisco UBR924 - uBR 924 Router Specifikace
(108 stránky)
(108 stránky)
Sítě Cisco WKPC54G Instalační příručka
(2 stránky)
(2 stránky)
Sítě Cisco WS-SVC-WISM-1-K9 Uživatelský manuál
(22 stránky)
(22 stránky)
Sítě Cisco IAD2431-1T1E1 Instalační příručka
(28 stránky)
(28 stránky)
Sítě Cisco Ethernet Connectors Jackscrew Specifikace
(37 stránky)
(37 stránky)
Sítě Cisco 521 Uživatelský manuál
(12 stránky)
(12 stránky)
Sítě Cisco NMH300 Instalační příručka
(32 stránky)
(32 stránky)
Sítě Cisco 7120-AT3 - 7120 Router Specifikace
(183 stránky)
(183 stránky)
Sítě Cisco CTX2500 Technické informace
(30 stránky)
(30 stránky)
Sítě Cisco WMA11B Uživatelská příručka
(32 stránky)
(32 stránky)
Sítě Cisco 7301 Technické informace
(40 stránky)
(40 stránky)
Sítě Cisco ISE - Line Card ISE Specifikace
(82 stránky)
(82 stránky)
© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.058 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce