© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 12 Configure the Cisco Virtual Private Network Client Backup Server, and Load Balancing

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon the completion of this lesson, you will be able to perform the following tasks: Describe the Cisco VPN Client reverse route injection, backup server, and load-balancing features. Configure the VPN Client for a backup server. Configure the Cisco VPN Client for load balancing. Configure the Concentrator for reverse route injection.

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Cisco VPN Client Backup Server Feature

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup Server Primary server Backup server SOHO X Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerConcentrator Configuration SOHO X Internet Drop-down menu choices: Use Client Configured List Disable and Clear Configured List Use List Below

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerHardware Client Configuration SOHO X Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerSoftware Client Configuration X Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Cisco VPN Client Load-Balancing Feature

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load-Balancing Cluster VPN virtual cluster IP address SOHO Internet Master Secondary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN SOHO Load-Balancing Connection Process VPN virtual cluster IP address SOHO Internet Secondary Master

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN VCA messages SOHO Internet Secondary Master Secondary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load-Balancing Configuration Process

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Add Rules to Filter SOHO Internet Master Secondary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Load-Balancing Configuration SOHO Internet Virtual IP address Secondary Master Secondary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Load-Balancing Configuration SOHO Secondary Master Secondary Virtual address Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client System Status SOHO Secondary Master Secondary Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN VPN Software Client Load-Balancing Configuration Secondary Master Secondary Virtual address Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview of the Cisco VPN Client Reverse Route Injection Feature

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN VPN Client route is advertised out which Concentrator? Advertising VPN Client Routes SOHO Internet SOHO Secondary Master

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN RRI Feature The following are the VPN Client RRI features: Client RRI Network extension RRI Advertise host route Tunnel established SOHO Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client RRI Client mode Advertise host route Tunnel established Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client RRIRouting Table No tunnel Tunnel established Cisco VPN 3002 Client mode Internet Tunnel establishedAdvertise

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Extension RRI Cisco VPN 3002 Network Extension mode Internet Tunnel establishedAdvertise host routes

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Extension RRIRouting Table No tunnel Tunnel established Cisco VPN 3002 Network Extension mode Internet Tunnel established Advertise

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary The Concentrator can be configured to advertise routes as VPN Clients connect. The VPN Client can be configured to connect to a backup Concentrator if the primary Concentrator is unavailable. The Concentrators can be configured for load balancing to spread the connection load between co-located Concentrators.

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective P.0 Student PP P.0 RTS VPN 3000 Web FTP.10.1PP PP.0