Cisco OL-5490-01 User's Guide

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

xVPN Client User Guide for Mac OS XOL-5490-01About This GuideObtaining Technical AssistanceOrdering DocumentationYou can find instructions for orderi

xiVPN Client User Guide for Mac OS XOL-5490-01About This GuideObtaining Technical Assistance• Download and test software packages• Order Cisco learni

xiiVPN Client User Guide for Mac OS XOL-5490-01About This GuideObtaining Additional Publications and InformationCisco TAC Escalation CenterThe Cisco

CHAPTER 1-1VPN Client User Guide for Mac OS XOL-5490-011Understanding the VPN ClientThe Cisco VPN Client for Mac OS X is a software application that r

1-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client OverviewVPN Client OverviewThe VPN Client works

1-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client FeaturesVPN Client FeaturesThe tables in the fol

1-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client FeaturesAutomatic VPN Client configuration optio

1-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client FeaturesAuthentication FeaturesThe VPN Client su

1-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client FeaturesVPN Client IPSec AttributesThe VPN Clien

1-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client FeaturesExtended Authentication (XAUTH)The capab

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOM

1-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 1 Understanding the VPN ClientVPN Client Features

CHAPTER 2-1VPN Client User Guide for Mac OS XOL-5490-012Installing the VPN ClientThis chapter describes how to install the VPN Client for Mac OS X.Ver

2-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientObtaining the VPN Client SoftwareObtaining the VPN Client Soft

2-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientPreconfiguring the VPN ClientFigure 2-2 VPN Client Installer D

2-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientBundling a Root Certificate with the Installation Package for

2-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientFigure 2-3 Authorization WindowStep 2

2-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientVPN Client Installation ProcessYou mu

2-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientAccepting the License AgreementYou ar

2-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientFigure 2-7 Select Destination WindowC

2-9VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientFigure 2-8 Easy Install WindowTo choo

iiiVPN Client User Guide for Mac OS XOL-5490-01CONTENTSAbout This Guide viiAudience viiContents viiRelated Documentation viiiTerminology viiiDocument

2-10VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientClick Easy Install to return to the

2-11VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientInstalling the VPN ClientFigure 2-11 Successful Installation

2-12VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientUninstalling the VPN ClientFigure 2-12 Location of VPN Client

2-13VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientUninstalling the VPN ClientNote We recommend that you uninsta

2-14VPN Client User Guide for Mac OS XOL-5490-01Chapter 2 Installing the VPN ClientUninstalling the VPN Client

CHAPTER 3-1VPN Client User Guide for Mac OS XOL-5490-013Navigating the User InterfaceThis chapter describes the main VPN Client window and the tools,

3-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceChoosing a Run Mode–Save window settings—Saves changes to

3-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Simple ModeFigure 3-3 VPN Client Window—Simpl

3-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeOperating in Advanced ModeUse Ad

3-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeToolbar Action Buttons—Advanced

ContentsivVPN Client User Guide for Mac OS XOL-5490-01Preconfiguring the User Profile 2-3Preconfiguring the Global Profile 2-3Bundling a Root Certifi

3-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeMain Menus—Advanced ModeThe foll

3-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeStatus MenuUse the Status menu (

3-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced Mode• Retry Certificate Enrollment—R

3-9VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeConnection Entries Tab Right-Cli

3-10VPN Client User Guide for Mac OS XOL-5490-01Chapter 3 Navigating the User InterfaceOperating in Advanced ModeCertificates Tab Right-Click Me

CHAPTER 4-1VPN Client User Guide for Mac OS XOL-5490-014Configuring Connection EntriesA connection entry is a set of parameters that the VPN Client us

4-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesCreating a Connection EntryTo create a connection entry:S

4-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesAuthentication MethodsStep 4 Enter a unique connection en

4-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesAuthentication MethodsFigure 4-3 Group AuthenticationStep

4-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesAuthentication MethodsFigure 4-4 Certificate Authenticati

ContentsvVPN Client User Guide for Mac OS XOL-5490-01Mutual Group Authentication 4-4Certificate Authentication 4-4Transport Parameters 4-6Enable Tran

4-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesTransport ParametersTransport ParametersThis section desc

4-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesTransport ParametersEnable Transport TunnelingTransparent

4-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesBackup Servers• When this parameter is disabled, all traf

4-9VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesBackup ServersFigure 4-6 Backup Servers TabStep 5Check th

4-10VPN Client User Guide for Mac OS XOL-5490-01Chapter 4 Configuring Connection EntriesBackup ServersStep 3 Click OK. The backup server is adde

CHAPTER 5-1VPN Client User Guide for Mac OS XOL-5490-015Establishing a VPN ConnectionThis chapter describes how to establish a VPN connection with a p

5-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 5 Establishing a VPN ConnectionEstablishing a ConnectionFigure 5-1 VPN Client IconThe mai

5-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 5 Establishing a VPN ConnectionChoosing Authentication MethodsThe status bar at the botto

5-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 5 Establishing a VPN ConnectionChoosing Authentication MethodsFigure 5-4 Shared Key Authe

5-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 5 Establishing a VPN ConnectionChoosing Authentication MethodsFigure 5-6 User Authenticat

ContentsviVPN Client User Guide for Mac OS XOL-5490-01CHAPTER 7 Managing the VPN Client 7-1Managing Connection Entries 7-1Importing a Connection Entr

5-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 5 Establishing a VPN ConnectionUsing Digital CertificatesFigure 5-7 User Authentication f

CHAPTER 6-1VPN Client User Guide for Mac OS XOL-5490-016Enrolling and Managing CertificatesThis chapter describes how to enroll and manage digital cer

6-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesEnrolling CertificatesFigure 6-1 Certificate StoreFo

6-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesEnrolling CertificatesFigure 6-2 Online Certificate

6-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesEnrolling CertificatesStep 5 Click Next to continue

6-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesEnrolling CertificatesThe certificate enrollment is

6-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesEnrolling CertificatesStep 3 Enter the password in t

6-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesImporting a CertificateImporting a CertificateA netw

6-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesViewing a CertificateFigure 6-7 Certificate Properti

6-9VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesExporting a Certificate–state or province (st)–count

viiVPN Client User Guide for Mac OS XOL-5490-01About This GuideThis VPN Client User Guide describes how to install, use, and manage the Cisco VPN Cli

6-10VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesDeleting a CertificateFigure 6-9 Successful Export

6-11VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesVerifying a CertificateStep 3 Click Delete at the t

6-12VPN Client User Guide for Mac OS XOL-5490-01Chapter 6 Enrolling and Managing CertificatesChanging the Password on a Personal CertificateChan

CHAPTER 7-1VPN Client User Guide for Mac OS XOL-5490-017Managing the VPN ClientThis chapter describes how to manage connection entries, and view and m

7-2VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientManaging Connection EntriesFigure 7-1 Import VPN ConnectionStep

7-3VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientManaging Connection EntriesFigure 7-2 Connection Entry SettingsT

7-4VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientEvent LoggingFigure 7-3 Confirm DeleteCaution You cannot retriev

7-5VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientEvent LoggingFigure 7-4 Event LogEvery VPN session contains at l

7-6VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientEvent LoggingFigure 7-5 Log SettingsTable 7-1 describes the log

7-7VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientEvent LoggingStep 3 Select the logging level for each module tha

viiiVPN Client User Guide for Mac OS XOL-5490-01About This GuideRelated Documentation• Chapter 7, “Managing the VPN Client.” This chapter describes h

7-8VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientViewing StatisticsFigure 7-7 Log WindowThe following buttons all

7-9VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientViewing Statistics• Split tunneling• NAT transparencyTo view VPN

7-10VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientViewing StatisticsRoute DetailsThe Route Details tab displays t

7-11VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientViewing StatisticsFigure 7-9 Statistics Window—Route DetailsFor

7-12VPN Client User Guide for Mac OS XOL-5490-01Chapter 7 Managing the VPN ClientViewing StatisticsFigure 7-10 Notifications WindowThe top pane

IN-1VPN Client User Guide for Mac OS XOL-5490-01INDEXAadministrator password 2-4advanced modebuttons3-5menus 3-6tabs 3-5window 3-4AES (Advanced Encry

IndexIN-2VPN Client User Guide for Mac OS XOL-5490-01management 6-1new password 6-3online enrollment 6-2password 5-6, 6-7peer 1-5properties 6-8resume

IndexIN-3VPN Client User Guide for Mac OS XOL-5490-01directory, applications 2-8disable logging 3-8disconnect client 3-3, 3-9disk drive 2-7disk space

IndexIN-4VPN Client User Guide for Mac OS XOL-5490-01Iicon for installer 2-2identity certificate 4-3IKE (Internet Key Exchange) 1-2, 7-6IKE keepalive

IndexIN-5VPN Client User Guide for Mac OS XOL-5490-01main tabscertificates3-5connection entries 3-5log 3-5main VPN Client window 3-4, 5-2managingcert

ixVPN Client User Guide for Mac OS XOL-5490-01About This GuideObtaining DocumentationCaution Means reader be careful. Cautions alert you to actions o

IndexIN-6VPN Client User Guide for Mac OS XOL-5490-01PKI (Public Key Infrastructure) 1-3, 4-4platform 3-1POTS 1-1preconfiguration tasks 2-2preconfigu

IndexIN-7VPN Client User Guide for Mac OS XOL-5490-01terms, license agreement 2-7toggle command 3-2tooltips, enabling 3-2transparent tunneling 1-5, 4

IndexIN-8VPN Client User Guide for Mac OS XOL-5490-01