© 2003, Cisco Systems, Inc. All rights reserved. CSVPN 4.010-1 Lesson 10 Configure the Cisco VPN 3002 Hardware Client for Remote Access Using Pre-Shared. - презентация

1 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 10 Configure the Cisco VPN 3002 Hardware Client for Remote Access Using Pre-Shared Keys

2 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon completion of this lesson, you will be able to perform the following tasks: Configure the Cisco VPN 3002 Hardware Client for client mode remote access. Configure the Cisco VPN 3002 Hardware Client for network extension mode remote access. Monitor the status of the Cisco VPN 3002 Hardware Client.

3 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3002 Hardware Client Remote Access with Pre-Shared Keys

4 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Remote Access Remote User Single user SOHO Server ISP Internet

5 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Remote Access Tunnel IPSec tunnel or session Hardware Client Internet Application server Concentrator

6 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Modes PAT Client mode Network extension mode Internet Internet

7 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Remote Access TunnelingHardware Client Mode PC IP address Application server ISP Hardware Client VPN private IP VPN public IP NIC IP address Client IP address ESP Data PAT Internet

8 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware ClientPhysical Connections Console port VPN private IP VPN public IP Power Hardware reset switch Internet

9 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware ClientConfiguration Options Welcome to Cisco Systems VPN 3000 Concentrator Series Command Line Interface Copyright (C) Cisco Systems, Inc. 1) Configuration 2) Administration 3) Monitoring 4) Save changes to Config file 5) Help Information 6) Exit

10 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN GUI Table of contents Toolbar Manager screen

11 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Quick Configuration

12 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN System Information

13 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuration Upload

14 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Private IP Address Interface Ethernet 1 (private IP address) Ethernet 2 (public IP address)

15 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Public IP Address Interface Ethernet 1 (private IP address) Ethernet 2 (public IP address) Default gateway Internet

16 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN IPSec Protocol Grouptraining Userstudent1 Peers Internet Concentrator Concentrator authentication Private network authentication

17 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN PAT Internet

18 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN DNS boston01 Internet DNS ISP

19 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Static Routes Internet

20 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Admin Password

21 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Access Rights Hardware Client

22 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Launching the Client Internet

23 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware ClientMonitoring System Status Internet Tunnel

24 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN ConcentratorMonitor Session Internet Tunnel

25 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN ConcentratorMonitor Session Details Internet Tunnel

26 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Extension Mode Network extension mode Internet

27 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN ConcentratorHardware Client Tab Internet

28 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Quick ConfigurationIP Address Internet

29 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Quick ConfigurationNetwork Extension Mode Internet

30 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware ClientMonitor Status Internet Tunnel

31 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN ConcentratorMonitor Session Internet

32 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN ConcentratorMonitor Session Detail Internet

33 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

34 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary The Cisco VPN 3002 Hardware Client supports two modes: client and network extension. Client mode will translate the PC IP address via PAT. All traffic from private networks appears as a single-source IP address. In network extension mode, all PCs are uniquely addressable via the tunnel.

35 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

36 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective P Concentrator.1PP RTS RBB Student PC PP P.0.5 DHCP server PP Hardware Client