实施cisco客户端模块3 ipsec iscw10s04l07.pptx

IPsecVPNsImplementingtheCiscoVPNClient

CiscoVPNClientConfigurationTasks

CiscoVPNClientConfigurationTasksInstallCiscoVPNClient.Createanewclientconnectionentry.Configuretheclientauthenticationproperties.Configuretransparenttunneling.Enableandaddbackupservers.ConfigureaconnectiontotheInternetthroughdial-upnetworking.

UsetheCiscoVPNClienttoEstablishanRAVPNConnectionandVerifytheConnectionStatus

UsetheCiscoVPNClienttoEstablishaVPNConnectionandVerifytheConnectionStatusInstallationprocess:DownloadthelatestversionoftheCiscoVPNClientfromtheCCO.RemoveanypreviousversionsoftheCiscoVPNClient.Startthesetupprocessthatwillguideyouthroughtheinstallationsteps.Configurationprocess:StarttheVPNClient.CreateandconfigureVPNconnections.TestVPNconnections.

Task1:InstallCiscoVPNClient

Task2:CreateaNewClient

ConnectionEntry2.1.

Task2:CreateaNewClient

ConnectionEntry(Cont.)4.6.3.5.

Task3:ConfigureClient

AuthenticationPropertiesAuthenticationoptions:Grouppresharedsecrets(groupnameandgroupsecret)Mutualauthentication(importCAcertificatefirst;groupnameandsecret)Digitalcertificates(enrollwiththeCAfirst;selectthecertificate)1.2.3.4.

MutualGroupAuthentication1.2.Mutualauthenticationshouldbeusedinsteadofgrouppresharedsecrets.Grouppresharedsecretsarevulnerabletoman-in-the-middleattacksiftheattackerknowsthegrouppresharedsecret.

Task4:ConfigureTransparentTunneling1.2.Onbydefault.NAT-TenablesIPsecandIKEoverastandardUDPport4500,allowingtheVPNClienttobebehindaNATorPATdevice.

RoutingTableTheStatisticswindowprovidesinformationabouttunneldetails,routingtable,andpersonalfirewall.1.2.

Task5:EnableandAddBackupServersListbackupVPNserverstobeusedincasetheprimaryVPNserverisnotreachable.1.2.3.

Task6:ConfigureConnectiontotheInternetThroughDial-UpNetworkingOptionally,ti