Cisco VPN 3000 User's Guide download pdf (Page 229)

Configuration | User Management | Groups | Add or Modify (Internal)

12-23

VPN 3000 Concentrator Series User Guide

Primary WINS

Enter the IP address, in dotted decimal notation, of the primary WINS server for this group’s users. The

system sends this address to the client as the first WINS server to use for resolving hostnames under

Windows NT. See note above.

Secondary WINS

Enter the IP address, in dotted decimal notation, of the secondary WINS server for this group’s users.

The system sends this address to the client as the second WINS server to use for resolving hostnames

under Windows NT. See note above.

SEP Card Assignment

The VPN Concentrator can contain up to four SEP (Scalable Encryption Processing) modules that handle

encryption functions, which are compute-intensive. Two SEP modules handle up to 5000 sessions

(users)—the system maximum. Two additional modules can provide automatic failover for the first two.

This parameter lets you configure the load on each SEP module.

Check the box to assign this group’s load to a given SEP module. If your system does not have a given

SEP module, the parameter is ignored.

Tunneling Protocols

Check the desired boxes to select the VPN tunneling protocols that this group’s user clients can use.

Configure parameters on the

IPSec or PPTP/L2TP tabs as appropriate. Clients can use only the selected

protocols.

You cannot check both

IPSec and L2TP over IPsec. The IPSec parameters differ for these two protocols,

and you cannot configure a single group for both.

PPTP = Point-to-Point Tunneling Protocol. PPTP is a client-server protocol, and it is popular with

Microsoft clients. Microsoft Dial-Up Networking (DUN) 1.2 and 1.3 under Windows 95/98 support

it, as do versions of Windows NT 4.0 and Windows 2000.

L2TP = Layer 2 Tunneling Protocol. L2TP is a client-server protocol. It combines many features

from PPTP and L2F (Layer 2 Forwarding).

IPSec = IP Security Protocol. IPSec provides the most complete architecture for VPN tunnels, and it

is perceived as the most secure protocol. Both LAN-to-LAN (peer-to-peer) connections and

client-to-LAN connections can use IPSec. The Cisco VPN 3000 Client is an IPSec client

specifically designed to work with the VPN Concentrator. However, the VPN Concentrator can

establish IPSec connections with many protocol-compliant clients.

L2TP over IPSec = L2TP using IPSec for security. L2TP packets are encapsulated within IPSec, thus

providing an additional authentication and encryption layer for security. L2TP over IPSec is a

client-server protocol, and it provides interoperability with the Windows 2000 VPN client and other

compliant remote-access clients.

Note: If no protocol is selected, none of this group’s user clients can access or use the VPN.

1 2 ... 224 225 226 227 228 229 230 231 232 233 234 ... 501 502

No comments

Cisco VPN 3000 User's Guide Page 229