The Manager, exactly like the CLI, is made up of three major
sections and many second- and third-level subsections:
Configuration
Administration
Monitoring
Configuration
The Configuration menu is used to set all parameters that
govern the unit’s use and functionality as a VPN device. Cisco supplies default
parameters that cover typical installations and uses. Figure 14-4 shows the
Configuration menu fully expanded. The insert graphic shows the four second-tier
options.
Figure 14-4:
Configuration menu fully expanded
The Configuration section provides access to configure all VPN
3000 Concentrator features:
Interfaces—Ethernet interfaces, DNS
servers, domain name, and power supplies
System—system-wide parameters: servers,
address assignment, tunneling protocols, IP routing, IPSec, management
protocols, events, identification, and the Client autoupdate feature
User Management—create and modify groups
and users
Policy Management—access hours, network
lists, rules, security associations, filters, and NAT and group
matching
Administration
The Administration menu manages the higher level functions
that keep the 3000 unit operational and secure, such as who is allowed to
configure the system, what software runs on it, and managing its configuration
files and digital certificates. Only the administrator account can use the VPN
Concentrator Manager. Figure 14-5 shows the Administration menu fully
expanded out.
Figure 14-5: Administration menu fully
expanded
The Administration section provides access to control VPN 3000
Concentrator administrative functions:
Administer Sessions—statistics and logout
capability for all sessions
Software Update—update concentrator and
VPN client software
System Reboot—system reboot options,
including save and scheduling choices
Ping—use ICMP ping to determine
connectivity to an address
Monitoring Refresh—enable automatic
refresh of Monitoring screens
Access Rights—configure administrator
profiles, access, sessions, and AAA
File Management—view, save, delete, swap,
and transfer files
Certificate Management—install, enroll,
and manage digital certificates
Monitoring
The Monitoring menu is used to track
many statistics and the status of many items essential to system administration
and management. You can see the state of any LEDs that show the status of
hardware subsystems in the device, as well as statistics stored and available in
standard MIB-II data objects. Figure 14-6 shows the Monitoring menu fully
expanded. The insert graphic shows the five second-tier options.
Figure 14-6: Monitoring
menu fully expanded
The Monitoring section of the Manager displays the VPN
Concentrator status, sessions, statistics, and event logs. The Monitoring
screens are read-only “snapshots” of data or status at the time the selection
was made. These aren’t real-time monitors. Most screens offer a Refresh button
in the upper-right corner of the screen, which can be used to get a fresh image.
The data on the screen can’t be modified.
This section of the Manager lets you view VPN 3000 Concentrator
status, sessions, statistics, and event logs.
Routing Table—current valid routes and protocols
Filterable Event Log—event logging with filtering
capabilities
System Status—current software revisions, uptime,
front-panel LEDs, network interfaces, SEP modules, and power supplies
Sessions—all active sessions and “top ten” sessions,
encryption and protocol data
Figure 14-7 shows an example of a Monitoring screen
using the Monitoring | System Status menu option. This screen shows the current
version of the software, device serial number, the time the unit has been up, as
well as CPU and Fan statistics. The device images show LED status and optional
components, plus interface, modules, and power supplies with embedded links that
display component statistics if clicked on.
Figure 14-7: System
monitoring screen
Help
Figure 14-8 shows the result of selecting
Configuration | Interfaces in the left panel, and then clicking the Help button
in the upper-right corner. The context-sensitive Help window works like any
Windows help document.
Figure 14-8: VPN 3000
Concentrator Manager Help system
Note
Help is a Java application, so Java must be enabled to see
it and you might need to turn off any pop-up window protection software.
VPN Concentrator User Interfaces and Startup
Basic Operations
The Manager application takes advantage of the graphical
interface to display as much information as feasible. Figure 14-9 shows the result
of selecting Configuration | Interfaces from the menu. Notice the application
map in the left-side panel shows where the screen is located in the structure.
The figure might not show this, but the actual selection is highlighted.
Figure 14-9: Typical
Manager screen with reminder icons
In the upper-right corner, two icons remind you that changes must
be saved and the screen needs to be refreshed—the data has timed out and is
considered stale. This is a most useful reminder when counters and statistics
are displayed. Clicking the icon activates the indicated service.
In the example figure, the back side of the device is
displayed. In larger models, this would indicate any options that were added to
the device.
Sections
Comments (0 posted)
Syndication
