Index

Table Of Contents

A - B - C - D - E - F - G - H - I - L - M - N - O - P - R - S - T - U - V - W -

Index

A

activating an IKE proposal 1-4

adding an SA 1-4

AppendOriginalSuffix Option parameter 2-12

ApplicationLauncher parameters 2-8

authentication parameters (.pcf file) 2-16

AuthType parameter (.pcf file) 2-15

auto initiation

AutoInitiationEnable parameter (vpnclient.ini) 2-5

AutoInitiationList (vpnclient.ini) 2-6

AutoInitiationRetry Interval (vpnclient.ini) 2-5

configuring 3-1

example 3-3

parameters 3-1

AYT firewall policy 1-6

B

BackupServer parameter (.pcf file) 2-17

backup servers

configured on VPN Concentrator for VPN Client 1-16

bitmaps

dialer 5-3

setup.bmp 5-2, 5-7

BlackIce Defender

firewall on remote PC 1-6

bmp files

for installation 5-2

setup 5-7

branding software

see customizing VPN Client software

brand parameters (oem.ini file) 5-9

C

Centralized Protection Policy (CPP) 1-6

Certificate Manager

customizing 5-6

parameters (oem.ini file) 5-12

certificates

enrollment

IP address 2-7

parameters (vpnclient.ini) 2-7

Entrust 1-17

group name requirement 1-4

organization unit field 1-4

parameters (.pcf files) 2-18

VPN Client connections

configuring VPN concentrator 1-3

changing the MTU size 6-4

Cisco Integrated Client

scenario 1-8

VPN Client software 1-6

client/server firewall 1-6

command-line

interface

error messages 4-9

switches

ipsecdialer 6-8

commands

ipsecdialer

command-line switches 6-8

msiexec 5-17, 7-2

logging options 7-2

vpnclient

connect 4-1

disconnect 4-6

displaying a list 4-1

notify 4-4

stat 4-6

verify autoinitconfig 4-5

configuration parameters

global profile 2-3

individual profiles 2-14

configurations

client/server 1-11

configuring

auto initiation 3-1

backup servers for VPN Client 1-16

Entrust certificate 1-17

local LAN access for VPN Client 1-14

NAT-T 1-16

personal firewalls 1-5

connecting from command line

ipsecdialer command 6-8

connection

ending 4-6

getting status 4-6

profiles 2-12

starting

vpnclient command 4-1

testing 6-7

connection entry

features controlled 2-13

file 2-13

preconfigured

distributing 2-20

sample .pcf file 2-13

connection-specific DNS suffix 2-10

continuous display 4-6

controlling Outlook to Exchange polling 2-6

CPP

defining filters and rules 1-10

creating

connection profiles 2-12

Entrust profile 1-17

global profile 2-2

IPSec group in VPN Concentrator 1-2

oem.ini file 5-7

user profiles in VPN Concentrator 1-3

customizing VPN Client software

areas affected by 5-2

bitmaps 5-4

Certificate Manager application 5-6

icons 5-4

Log Viewer application 5-6

menu titles and text 5-2

oem.ini file 5-7

setup bitmap 5-2

VPN Dialer application 5-3

D

data formats x

DefGroup parameter (oem.ini file) 5-10

defining rules for firewalls 1-10

Description parameter (.pfc file) 2-15

DHCP inbound traffic

stateful firewall 1-5

DHGroup parameter (.pcf files) 2-19

DialerDisconnect parameter (vpnclient.ini) 2-5

dialer icon

main dialog box 5-3

dialer parameters (oem.ini file) 5-10

directory

profiles 2-2, 2-12

Disable Fast Shutdown option 6-4

displaying

information continuously 4-6

notifications 4-4

distributing preconfigured software 2-20

DNS suffix

connection-specific 2-10

primary 2-9

Windows platforms 2-9

documentation

additional viii

cautions x

notes x

E

EnableBackup parameter (.pcf file) 2-17

EnableISPConnect parameter (.pcf file) 2-15

EnableLocalLAN parameter (.pcf file) 2-18

EnableLog parameter (vpnclient.ini) 2-5

EnableMSLogon parameter (.pcf file) 2-17

EnableNat parameter (.pcf file) 2-18

encGroupPwd parameter (.pcf file) 2-15

ending a connection 4-6

Entrust certificates

enabling VPN Client 1-17

EntrustIni parameter (vpnclient.ini) 2-4

error messages 4-9

ESP inbound traffic

stateful firewall 1-5

F

fallback mode 6-6

files

.bmp 5-2

.pcf 2-12

oem.ini 5-7

vpnclient.ini 2-2

sample 2-3

filters

defining for CPP 1-10

firewalls

AYT 1-6

BlackIce Defender 1-6

Cisco Integrated Client 1-6

client/server

configuring 1-11

configurations

comparisons 1-7

group 1-11

matching 1-5

scenarios 1-8

CPP 1-6

custom 1-12

defining filters and rules 1-10

Integrity Server 1-6

notifications during negotiations 1-13

personal firewall

enforcement on remote PC 1-6

requiring 1-5

stateful on VPN Client 1-5

ForceKeepAlives parameter (.pcf file) 2-18

formats

data x

fragmentation

preventing 6-4

G

global profile

creating 2-2

GroupName parameter (.pcf file) 2-15

GroupPwd parameter (.pcf file) 2-15

H

HKEY_LOCAL_MACHINE 6-7

Host parameter (.pcf file) 2-15

I

icons

auto initiation parameters 5-11

Certificate Manager 5-6

customizing 5-4

dialer 5-3

Log Viewer 5-6

IKE proposals

activating 1-4

list 6-9

phase 2 6-11

incompatible ginas

adding 6-6

fallback mode 6-6

start before logon feature 6-5

IncompatibleGinas parameter (vpnclient.ini file) 2-4

installation

automatic 5-1

InstallPath parameter (oem.ini file) 5-10

InstallShield

features 7-1

silent install 5-18

Integrity Server firewall

configuring 1-11

feature description 1-6

IP addresses

certificate enrollment 2-7

IPSec group

creating on VPN Concentrator 1-2

IPSec log file

troubleshooting firewall configurations 1-12

ISPCommand parameter (.pcf file) 2-16

ISPConnect parameter (.pcf file) 2-16

ISPConnectType parameter (.pcf file) 2-16

L

LMHOSTS file 1-15

local LAN access

configuring 1-14

logging during MSI installation 7-2

LogLevel parameter 2-7

log parameters (vpnclient.ini) 2-6

Log Viewer

customizing 5-6

icon 5-6

parameters (oem.ini file) 5-11

M

MainIcon parameter (oem.ini file) 5-9

making a parameter read only 2-2

matching firewall configurations 1-5

maximum transmission unit

see MTU setting

MissingGroupDialog parameter (vpnclient.ini) 2-4

MSI

features 7-1

launching 7-2

logging during installation 7-2

silent install 5-19

msiexec command 5-17

MSLogonType parameter (.pcf file) 2-17

MTU setting 6-4

changing 6-4

N

NAT Transparency (NAT-T)

configuring on VPN Concentrator 1-16

notifications

displaying 4-4

firewalls 1-13

upgrade 1-13

notify command 4-4

O

oem.ini file

creating 5-7

customizing VPN Client 5-7

keywords and values 5-9

sample 5-7

organizational unit field in certificate 1-4

OutlookNotify parameter 2-6

Outlook to Exchange polling

controlling 2-6

P

parameters

auto initiation (oem.ini) 5-11

Certificate Manager (oem.ini) 5-12

DefGroup (oem.ini) 5-10

global

table 2-4

InstallPath (oem.ini) 5-10

Log viewer (oem.ini) 5-11

MainIcon (oem.ini) 5-9

peer timeout (.pcf file) 2-18

profile (.pcf)

authentication 2-16

AuthType 2-15

BackupServer 2-17

certificate 2-18

Description 2-15

DHGroup 2-19

EnableISPConnect 2-15

EnableLocalLAN 2-18

EnableMSLogon 2-17

EnableNat 2-18

encGroupPwd 2-15

ForceKeepAlives 2-18

GroupName 2-15

GroupPwd 2-15

Host 2-15

ISPCommand 2-16

ISPConnect 2-16

ISPConnectType 2-16

MSLogonType 2-17

PeerTimeout 2-18

SendCertChain 2-19

TCPTunnelingPort 2-18

TunnelingMode 2-18

read only 2-2

reboot (oem.ini) 5-10

SilentMode (oem.ini) 5-10

vpnclient.ini

AppendOriginalSuffixOption 2-12

ApplicationLauncher 2-8

AutoInitiationEnable 2-5

AutoInitiationList 2-6

AutoInitiationRetry 2-5

certificate enrollment 2-7

DialerDisconnect 2-5

EnableLog 2-5

EntrustIni 2-4

IncompatibleGinas 2-4

log class 2-6

LogLevel 2-7

MissingGroupDialog 2-4

OutlookNotify 2-6

RunAtLogon 2-4

StatefulFirewall 2-5

table 2-4

vpnclient command 4-6

WizardBitMap (oem.ini) 5-9

pcf files

creating 2-12

distributing with VPN Client software 2-20

parameters 2-14

sample 2-13

PeerTimeout parameter (.pcf file) 2-18

personal firewalls

configuring for VPN Client

VPN Concentrator 1-5

phase 2 IKE proposals 6-11

preconfigured connection entry

distributing 2-20

preconfiguring VPN Clients for remote users 2-1

primary DNS suffix 2-9

printing by name on local LAN 1-15

profile

connection entry 2-12

creating user 1-3

directory 2-2

Entrust 1-17

file format 2-2

global 2-2

features controlled 2-2

parameters 2-4

sample 2-3

programmer notes

testing a connection 6-7

proposals

IKE 1-4, 6-9

phase 2 IKE 6-11

R

read-only parameters 2-2

Reboot parameter (oem.ini) file) 5-10

registry

testing a connection 6-7

related documentation ix

Remote Firewall

scenario 1-8

resetting counts 4-6

routing information 4-6

rules

defining for CPP 1-10

RunAtLogon parameter (vpnclient.ini) 2-4

S

SA

adding 1-4

sample files

.pcf file 2-13

oem.ini file 5-7

vpnclient.ini 2-3

SendCertChain parameter 2-19

SetMTU utility 6-4

launching silently 5-19

setup.bmp 5-2, 5-7

silent install 5-1

InstallShield 5-18

MSI 5-19

SilentMode parameter (oem.ini file) 5-10, 5-17

start before logon

gina files 6-5

starting a connection 4-1

stateful firewall (always on) 1-5

StatefulFirewall parameter (vpnclient.ini) 2-5

status information

generating 4-6

synchonization

MS Outlook 2-6

system information

Windows 98 6-1

Windows NT 6-2

system security

protecting 2-14

T

TCPTunnelingPort parameter (.pcf file) 2-18

testing a connection 6-7

traffic information 4-6

transforms

editing 5-17

troubleshooting

connectivity application 6-4

generating information 6-1

TunnelEstablished parameter in registry 6-7

tunneling information 4-6

TunnelingMode parameter (.pcf file) 2-18

U

upgrade notifications

configured on VPN Concentrator 1-13

user profiles

creating for distribution 2-12

creating in VPN Concentrator 1-3

V

verifying an auto configuration 4-5

VPN Client

applications vii

configuring 2-1

vpnclient.ini file

file format 2-2

sample 2-3

vpnclient_en.msi command 7-2

vpnclient commands

disconnect 4-6

displaying a list 4-1

notify 4-4

stat 4-6

repeat 4-6

reset 4-6

route 4-6

traffic 4-6

verify autoinitconfig 4-5

VPN Concentrator

configuring personal firewalls for VPN Client 1-5

creating user profiles 1-3

VPN Dialer

customizing 5-3

W

Windows 98

generating system information 6-2

shut down problem 6-3

Windows NT or Windows 2000

generating system information 6-2

WINMSD utility

Windows NT or Windows 2000 6-2

WizardBitMap parameter (oem.ini file) 5-9