Configure the IPSec

The Client Manager displays the Configuration | Quick | IPSec screen.

This screen lets you configure the IPSec parameters, enabling the VPN 3002 to connect to the VPN Concentrator or to other IPSec security gateways, such as the Cisco PIX firewall or Cisco IOS routers. Figure 15-18 shows the IPSec configuration screen.

Figure 15-18: IPSec configuration screen

The Remote Server field is for the IP address or host name of the VPN Concentrator to which this VPN 3002 hardware client connects. If a host name is used, a DNS server must be available to resolve the name.

As mentioned previously, NAT-T is the default, but you can check the IPSec over TCP box to use TCP. The TCP feature must also be enabled on the VPN Concentrator to which this VPN 3002 connects.

Specify the IPSec over TCP port number; only one port number can be specified. The VPN 3002 port must also be configured on the VPN Concentrator to which this VPN 3002 connects.

The Use Certificate box specifies digital certificates for authentication. With digital certificates, you needn’t enter a group name and group password.

Digital Certificates

You have two Select a Certificate Transmission options:

Entire certificate chain—to send the peer the identity certificate and all issuing certificates, including the root certificate and any subordinate CA certificates.
Identity certificate only—to send the peer only the identity certificate.

Preshared Keys

The following information has to be consistent with that configured for this VPN 3002 on the central-site VPN Concentrator.

Group Name field—unique name for this group (up to 32 characters, case-sensitive).
Group Password field—unique password for this group (4 to 32 characters, case-sensitive). The field displays only asterisks.
Group Verify field—reenter the group password.
User Name field—unique name for this user in the group (up to 32 characters, case-sensitive).
User Password field—unique password for this user (4 to 32 characters, case-sensitive). The field displays only asterisks.
User Verify field—reenter the user password.

Configure the IPSec