CLI Quick Configuration Steps
CLI Quick Configuration Steps
The CLI Quick Configuration Wizard prompts guide you through
the following configurations steps:
-
Set the system time, date, time zone, and daylight saving
time values.
-
Configure the VPN Concentrator private network interface
(Ethernet 1) by responding to the following prompts:
This table shows current IP addresses.
Interface IP Address/Subnet Mask MAC Address
---------------------------------------------------------------
| Ethernet 1 - Private | 0.0.0.0/0.0.0.0 |
| Ethernet 2 - Public | 0.0.0.0/0.0.0.0 |
| Ethernet 3 - External | 0.0.0.0/0.0.0.0 |
---------------------------------------------------------------
** An address is required for the private interface. **
> Enter IP Address
Quick Ethernet 1 -> [ 0.0.0.0 ] 192.168.1.1
> Enter Subnet Mask
Quick Ethernet 1 -> [ 255.0.0.0 ] 255.255.255.0
1) Ethernet Speed 10 Mbps
2) Ethernet Speed 100 Mbps
3) Ethernet Speed 10/100 Mbps Auto Detect
Quick -> [ 3 ]
1) Enter Duplex - Half/Full/Auto
2) Enter Duplex - Full Duplex
3) Enter Duplex - Half Duplex
Quick -> [ 1 ]
Once these settings are made, the remainder of the Quick
Configuration can be completed with the VPN Concentrator Manager (Cisco’s
recommended method). If the CLI method is used, similar prompts would guide the
configuration through the following features:
-
Configure any other interfaces. At a minimum, the Ethernet 2
public interface must be configured. An additional Ethernet 3 interface could be
on models 3015-3080 and/or optional WAN interface2.
-
Define information that identifies your VPN Concentrator on
the network, such as the system name, IP address of the DNS, registered Internet
domain name, and default gateway to which the VPN will forward unknown
packet3.
-
Define which tunneling protocols and encryption options are
to be use4.
-
Define the method(s) for assigning IP addresses to protected
clients on the private interface as the defined tunnel is establishe5.
-
Specify one of five types of servers to authenticate users:
the concentrator’s internal server, the external RADIUS server, the external NT
Domain server, external server, or the external SDI (RSA Security Inc. SecurID)
server, or Kerberos/Active Directory serve6.
-
When using the VPN Concentrator internal authentication
server, populate the internal user database with at least one user, each with a
user name and password, and, if per-user address assignment
is specified, an IP address and subnet mas
-
When using IPSec tunneling protocol, the remote-access
client connects to the VPN Concentrator via a group name and password, which
needs to be configure8.
-
Change the admin password to improve system security.
-
Save the configuration file (menu option) to complete quick
configuratio
|
Note |
The maximum number of entries (groups and users combined)
varies by model: Model 3005/3015–100Model 3030–500Model
3060/3080–1,000 |
216 times read
|
|
|
Did you enjoy this article?
(total 0 votes)
|
Sections
Comments (0 posted)
Syndication
