© 2003, Cisco Systems, Inc. All rights reserved. CSVPN 4.011-1 Lesson 11 Configure the Cisco Virtual Private Network 3002 Hardware Client for Unit and. - презентация

1 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 11 Configure the Cisco Virtual Private Network 3002 Hardware Client for Unit and User Authentication

2 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon completion of this lesson, you will be able to perform the following tasks: Describe the Hardware Client interactive unit and user authentication feature. Configure the Hardware Client for interactive unit authentication. Configure the Hardware Client for user authentication. Monitor the Hardware Client user statistics.

3 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview of the Hardware Client Interactive Unit and User Authentication Features

4 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Default Unit Authentication Hardware Client Unit authentication Authentication Internet

5 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Authentication Options Interactive unit authentication Authentication server Internet User authentication Hardware Client

6 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Hardware Client Interactive Unit Authentication Feature

7 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Interactive Unit Authentication Concentrator Configuration Internet Hardware Client

8 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Interactive Unit Authentication Hardware Client Configuration Internet Hardware Client

9 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Connection Methods

10 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 1Connect via the Hardware Client Manager

11 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 2Connect via the System Status Window

12 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 3Connect via the Redirect Message

13 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client IPSec Parameters

14 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Hardware Client User Authentication Feature

15 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client User Authentication Feature User authentication Internet Hardware Client

16 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN User Authentication Feature Concentrator Configuration Internet Hardware Client

17 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN User Authentication Feature Hardware Client Configuration Internet Hardware Client

18 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Connection Methods

19 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 1Connect via the Hardware Client Manager

20 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 2Connect via the System Status Window

21 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 3Connect via the Redirect Message

22 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Monitoring the Hardware Client User Statistics

23 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client User Status

24 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator User Status

25 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

26 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary There are three authentication options available on the Hardware Client: unit authentication, interactive unit authentication, and individual user authentication. Interactive unit and individual user authentication are enabled or disabled on the Concentrator. There are three ways to access interactive unit and individual user authentication prompts: connect via the Hardware Client Manager, connect via the system status window, or connect via the redirect message.

27 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

28 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective P.0 Student PP P.0 RTS Cisco VPN 3000 Series Concentrator Web FTP.10.1PP PP.0