Cisco 3002 - VPN Hardware Client Spécifications Page 81
- Page / 318
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
CHAPTER
6-1
VPN 3002 Hardware Client Reference, Release 4.0
OL-3813-01
6
Tunneling
Tunneling is the heart of virtual private networking. Tunnels make it possible to use a public TCP/IP
network, such as the Internet, to create secure connections between remote users and a private corporate
network.
The secure connection is called a tunnel, and the VPN 3002 uses the IPSec tunneling protocol to:
• Negotiate tunnel parameters.
• Establish tunnels.
• Authenticate users and data.
• Manage security keys.
• Encrypt and decrypt data.
• Manage data transfer across the tunnel.
• Manage data transfer inbound and outbound as a tunnel endpoint.
The VPN 3002 functions as a bidirectional tunnel endpoint:
• It can receive plain packets from the private network, encapsulate them, create a tunnel, and send
them to the other end of the tunnel where they are unencapsulated and sent to their final destination
• It can receive encapsulated packets from the public network, unencapsulate them, and send them to
their final destination on the private network.
This section explains how to configure the IPSec tunneling protocol.
- VPN 3002 Hardware Client 1
- Reference, Release 4.0 1
- CONTENTS 3
- 2 Configuration 2-1 4
- 3 Interfaces 3-1 4
- 4 System Configuration 4-1 5
- 5 Servers 5-1 5
- 6 Tunneling 6-1 5
- 7 IP Routing 7-1 6
- 8 Management Protocols 8-1 7
- 9 Events 9-1 8
- 10 General 10-1 9
- 11 Policy Management 11-1 9
- 12 Administration 12-1 10
- Contents 11
- 13 Monitoring 13-1 14
- A IKE Proposals A-1 24
- Prerequisites 27
- Organization 27
- Related Documentation 29
- Documentation conventions 30
- Data Formats 31
- Obtaining Documentation 32
- Cisco.com 33
- Technical Assistance Center 33
- Cisco TAC Web Site 34
- Cisco TAC Escalation Center 34
- JavaScript and Cookies 36
- Navigation Toolbar 36
- Click Next to continue 40
- Trusted 43
- Reinstallation 44
- First-time Installation 44
- Step 1 Bring up the browser 50
- Authentication 53
- Chapter 2 Configuration 64
- Interfaces 65
- Subnet Mask 67
- Disabled 68
- Static IP Addressing 68
- DHCP Client 70
- PPPoE Client 70
- IPSec Fragmentation Policy 72
- Chapter 3 Interfaces 74
- System Configuration 75
- Configuration 76
- Primary DNS Server 78
- Secondary DNS Server 78
- Tertiary DNS Server 78
- Timeout Period 79
- Timeout Retries 79
- Chapter 5 Servers 80
- Tunneling 81
- Chapter 6 Tunneling 82
- Remote Easy VPN Server 83
- Backup Easy VPN Servers 84
- Alert when disconnecting 86
- IPSec over TCP 86
- IPSec over TCP Port 86
- Use Certificate 87
- Certificate Transmission 87
- IP Routing 89
- Static Routes 90
- Add / Modify / Delete 90
- Network Address 91
- Default Gateway 93
- Lease Timeout 94
- Address Pool Start/End 94
- DHCP Option 95
- Option Value 96
- Nonconfigurable DHCP Options 97
- Chapter 7 IP Routing 98
- Management Protocols 99
- About HTTP/HTTPS 100
- Reminder: 101
- Enable Telnet 102
- Maximum Connections 103
- Apply / Cancel 103
- Enable Telnet/SSL 103
- Telnet Port 103
- Telnet/SSL Port 103
- Enable SNMP 104
- SNMP Port 104
- Maximum Queued Requests 104
- Communities 105
- Communities 106
- Community String 107
- Add or Apply / Cancel 107
- OL-3813-01 108
- Encryption Protocols 109
- Client Authentication 109
- SSL Version 110
- Apply/Cancel 110
- Enable SCP 113
- Enable HTTPS on Public 114
- Enable SSH on Public 115
- Event Class 117
- Chapter 9 Events 118
- Event Severity Level 119
- Event Log 120
- Syslog Format 122
- Severity to Log 123
- Severity to Console 123
- Severity to Syslog 123
- Severity to Trap 124
- Configured Event Classes 125
- Add/Modify/Delete 125
- Class Name 126
- Add or Apply/Cancel 127
- Trap Destinations 128
- Destination 129
- SNMP Version 129
- Community 129
- Syslog Servers 131
- Syslog Server 132
- Facility 132
- System Name 136
- Location 136
- Current Time 137
- New Time 137
- Enable DST Support 137
- Policy Management 139
- Certificate Validation 140
- About PAT (Client Mode) 140
- About Network Extension Mode 141
- group name and 142
- Tunnel Initiation 143
- Data Initiation 144
- 145
- Distinguished Name Component 147
- Administration 149
- icon in 150
- Current Software Revision 151
- Browse 151
- Upload/Cancel 151
- Software Update Progress 152
- Software Update Success 152
- Software Update Error 152
- Configuration 154
- Administration 155
- Address/Hostname to Ping 156
- Ping/Cancel 156
- Success (Ping) 156
- Error (Ping) 156
- Administrator 158
- Password 158
- Session Idle Timeout 160
- Session Limit 160
- Config File Encryption 160
- View (Save) 161
- Swap Config Files 162
- Config File Upload via HTTP 162
- OK/Cancel 162
- Local Config File/Browse 163
- File Upload Progress 163
- File Upload Success 164
- File Upload Error 164
- Certificate Management 165
- About the Documentation 166
- Obtaining SSL Certificates 178
- Deleting Digital Certificates 179
- Certificate Authorities Table 182
- Identity Certificates Table 182
- Enrollment Status Table 185
- Identity Certificate 187
- SSL Certificate 187
- Type 189
- Enroll / Cancel 192
- Renewal 193
- Identity Certificate 194
- SSL Certificate 195
- Install CA Certificate 197
- Obtained via Enrollment 198
- Cut & Paste Text 199
- Upload File from Workstation 199
- CA Certificate 200
- Type 201
- Filename / Browse 202
- Install / Cancel 202
- Certificate Fields 204
- Configure CA Certificate 206
- Re-Submit 209
- View Enrollment Request 211
- Enrollment Request Fields 212
- Cancel Enrollment Request 213
- Delete Enrollment Request 214
- Yes / No 215
- Monitoring 217
- Monitoring 218
- Select Filter Options 219
- Chapter 13 Monitoring 220
- Event Log Format 221
- Monitoring 222
- Pause Display/Resume Display 223
- Clear Display 223
- Monitoring 224
- Tunnel Established to 226
- Duration 226
- Tunnel Type 226
- Security Associations 226
- Front Panel 227
- Back Panel 227
- System Memory Summary 228
- Total Memory 228
- Memory Status 228
- Memory Detail Report 229
- Tx Multicast 233
- Rx Broadcast 233
- Tx Broadcast 233
- Monitoring 234
- Monitoring 235
- IKE (Phase 1) Statistics 237
- IPSec (Phase 2) Statistics 240
- System Capability Failures 242
- No-SA Failures 242
- Protocol Use Failures 242
- HTTP Sessions 244
- Max Connections 244
- Active Sessions 245
- Attempted Sessions 246
- Successful Sessions 246
- Telnet Sessions 246
- Monitoring 247
- Monitoring 248
- Active Leases 250
- Maximum Active Leases 250
- Monitoring 252
- Packets Sent/Received 253
- Maximum Sessions 253
- Total Sessions 253
- SSH Sessions 253
- Monitoring 254
- NAT Sessions 255
- Translated Bytes/Packets 256
- MAC Address 257
- Server Name 257
- Multiple PADO Rx 258
- Generic Errors Rx 258
- Malformed Packets Rx 258
- Interface 260
- TCP Segments Received 262
- -1 means there 263
- Total Received/Transmitted 268
- Physical Address 272
- IP Address 272
- Mapping Type 272
- Action/Delete 272
- Alignment Errors 273
- MAC Errors: Transmit 275
- MAC Errors: Receive 275
- Speed (Mbps) 275
- Requests Received 276
- Bad Version 276
- Bad Community String 277
- Parsing Errors 277
- Silent Drops 277
- Proxy Drops 277
- Console Access 279
- Telnet or Telnet/SSL access 280
- Choosing Menu Items 281
- Entering Values 281
- Navigating Quickly 282
- Getting Help Information 283
- Saving the Configuration File 284
- Understanding Access Rights 284
- Menu Reference 285
- 2 Administration 287
- 3 Monitoring 290
- 3.2 Monitoring > Event Log 291
- IKE Proposals 293
- AppendixA IKE Proposals 294
- Valid IKE Proposals 294
- Appendix A IKE Proposals 295
- Files for Troubleshooting 297
- LED Indicators 298
- System Errors 299
- Manager Logs Out 302
- Incorrect Display 303
- Error Message 303
- Not Allowed Message 304
- Not Found 305
- Command-line Interface Errors 306
- Numerics 307
Produits connexes et manuels pour Mise en réseau Cisco 3002 - VPN Hardware Client
(20 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.053 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels