Implementing the Cisco VPN Client参考.ppt

IPsec VPNs Implementing the Cisco VPN Client Cisco VPN Client Configuration Tasks Install Cisco VPN Client. Create a new client connection entry. Configure the client authentication properties. Configure transparent tunneling. Enable and add backup servers. Configure a connection to the Internet through dial-up networking. Use the Cisco VPN Client to Establish a VPN Connection and Verify the Connection Status Installation process: Download the latest version of the Cisco VPN Client from the CCO. Remove any previous versions of the Cisco VPN Client. Start the setup process that will guide you through the installation steps. Configuration process: Start the VPN Client. Create and configure VPN connections. Test VPN connections. Task 1: Install Cisco VPN Client Task 2: Create a New ClientConnection Entry Task 2: Create a New ClientConnection Entry (Cont.) Task 3: Configure ClientAuthentication Properties Authentication options: Group preshared secrets (group name and group secret) Mutual authentication (import CA certificate first; group name and secret) Digital certificates (enroll with the CA first; select the certificate) Mutual Group Authentication Mutual authentication should be used instead of group preshared secrets. Group preshared secrets are vulnerable to man-in-the-middle attacks if the attacker knows the group preshared secret. Task 4: Configure Transparent Tunneling On by default. NAT-T enables IPsec and IKE over a standard UDP port 4500, allowing the VPN Client to be behind a NAT or PAT device. Routing Table The Statistics window provides information about tunnel details, routing table, and personal firewall. Task 5: Enable and Add Backup Servers List backup VPN servers to be used in case the primary VPN server is not reachable. Task 6: Configure Connection to the Internet Through Dial-Up Networking Optionally, tie a VPN connection to a dial-up connection defined in the Networking section of Windows. Summary You can install the VPN Client on your syste