add     15-4

modify     15-4

configuring     5-28

access hours     15-4

address pool     6-6

email recipient of events     10-33

event class     10-18

filter (traffic management)     15-40

filter rule (traffic management)     15-15

IPSec LAN-to-LAN connection     7-17

NAT rule     15-55

network list     15-9

NTP host     5-41

OSPF area     8-12

security association (traffic management)     15-29

security association to rule on filter     15-46

SMTP server for events     10-30

SNMP community     9-13

SNMP event destination     10-23

static route for IP routing     8-5

syslog server to receive events     10-26

user on internal server (user management)     14-122

configuring     6-5

changing group delimiter     11-6

global     11-6

order of checking     14-2

configuring     5-2

internal     14-1

testing     5-15, 14-96

authorization required     14-14, 14-58

authorization type     14-14, 14-58

DN field     14-15, 14-59

configuring     5-21, 14-99

testing     5-26, 14-106

bandwidth aggregation     15-66

bandwidth policing     15-65, 15-67

bandwidth reservation     15-65

burst size     15-67

configuring     15-67

enabling on interface     3-20, 15-64, 15-67

in LAN-to-LAN configuration     15-67, 15-68

overview of     15-65

policing rate     15-67

policy

specifying the link rate     3-20, 15-67

configuring     15-64

installing SSL certificate     1-5

navigation toolbar, do not use with Manager     1-3

Netscape Navigator, problems with     1-3

requirements     1-2

See management protocols     9-1

defining rules     15-72

fields     15-76

policy     15-79

rules

IPSec attributes     7-9, 15-24

IPSec support     14-8, 14-52, 14-128

route advertisement     8-22

supports Mode Configuration     14-16, 14-60

and split tunneling     14-25, 14-67

Are You There (AYT) policy     14-25, 14-29, 14-67, 14-71

Central Protection Policy (CPP)     14-25, 14-29, 14-67, 14-71, 15-15

configuring rules for firewall filters     14-25, 14-67, 15-15, 15-17, 15-19, 15-22

custom     14-28, 14-70

local     14-25, 14-67

supported products     14-27, 14-69

vendor and product codes     14-28, 14-70

Zone Labs Integrity Server     14-25, 14-29, 14-67, 14-71

enabling     12-3

image files     12-2

IPComp     14-15, 14-59

MPPC     14-38, 14-40, 14-80, 14-82

using HTTP     1-4

using HTTPS     1-20

documentation     xiv

typographic     xiv

filter (traffic management)     15-40

filter rule (traffic management)     15-15

IKE proposal     7-32

network list     15-9

formats     xvii

event handling, configuring     10-7

filter rules

filters

gateways, configuring for IP routing     8-7

IKE proposals, table     7-29

security associations, table     15-26, 15-27

tunnel gateway, configuring     8-7

filter rule (traffic management)     15-23

group (user management)     14-43

internal authentication server     5-14

security association (traffic management)     15-36

user on internal server (user management)     14-121

functions within the VPN Concentrator, configuring     8-14

IP address range     14-8, 14-52

servers, configuring     5-34

in IPSec LAN-to-LAN     7-20

configuring for group     14-51

servers, configuring     5-32

additional     xiv

conventions     xiv

add     10-33

See also interfaces

configuring for special handling     10-16

table     10-1

tracking specific     10-12

capacity     10-5

deleting from flash memory     10-7

file size     10-8

save     10-7

saved at system reboot     10-8

saved if system crashes     10-8

saving in flash memory     10-7

saving via FTP     10-8, 10-14

configuring default handling     10-7

configuring handling     10-6

configuring special handling     10-16

section of Manager     10-1

tracking specific     10-12

table     10-4

tracking events of a specific severity     10-12

add (traffic management)     15-40

add security association to rule on     15-46

assign rules to (traffic management)     15-43

configuring (traffic management)     15-37

configuring on base group     14-6

configuring on group     14-50

configuring on interface

configuring on user     14-127

copy (traffic management)     15-40

default

modify (traffic management)     15-40

add (traffic management)     15-15

configuring     15-11

copy (traffic management)     15-15

default

delete (traffic management)     15-23

modify (traffic management)     15-15

dynamic     15-1

firewall     15-15, 15-38

See client firewall     14-67

saving log files in     10-7

data     xvii

IPSec     3-14, 7-23

configuring internal server     9-2

using to save log files     10-8, 10-14

delete     14-43

modify external     14-84

modify internal     14-45

adding to routing table     8-22

configuring internal server     9-4

using with Manager     1-4

configuring internal server     9-4

connecting using     1-20

login screen     1-20

and Easy VPN compliant clients     14-12, 14-56

idle time allowed in keepalive monitoring     14-56

active     7-30

add     7-32

configuring     7-28

copy     7-32

default, table     7-29

inactive     7-30

in IPSec LAN-to-LAN     7-22

in security association     15-24

modify     7-32

See security associations

with Internet Explorer     1-6

with Netscape     1-13

configuring     3-2

Ethernet, configuring     3-9

filter

public     3-11, 7-16, 15-54

section of Manager     3-1

status     3-4

configuring     5-13

deleting     5-14

maximum groups and users     14-1

configuring assignment of     6-3

configuring     8-2

section of Manager     8-1

alerts     7-39

banner for clients     14-17, 14-62

Cisco VPN Client     7-9, 14-8, 14-52, 14-128, 15-24

configuring     7-9

data compression     14-15, 14-59

discussion     7-9

fragmentation policy     3-14, 7-23

Mode Configuration     14-16, 14-60

rules     15-6

security associations

XAuth     14-14, 14-58

automatic parameters     7-18, 7-27, 15-18

configuring     7-11

Done (screen)     7-27

redundancy     7-11

rules that apply IPSec     15-18

using network lists     7-19, 7-24

configuring

configuring     14-93

on Linux server     5-11, 14-93

configuring

configuring system-wide parameters     7-6

data compression     14-40, 14-82

configuring

default security association to use     14-10, 14-54, 14-130

do not use Mode Configuration     14-16, 14-60

IKE proposal required     7-30

no IPSec user authentication     14-14, 14-58

Windows 2000 client support     7-1, 14-8, 14-52, 14-128

See IPSec LAN-to-LAN

configuring     14-103

explanation     14-33, 14-76

and VRRP     8-18, 13-1

configuring     13-4

device priority     13-6

virtual cluster     13-1

virtual cluster master     13-1

See event log

name

password, factory default (Manager)     1-21

screen     1-4

system object     11-2

and split tunneling     14-16, 14-60

Cisco VPN Client supports     14-16, 14-60

access hours     15-4

accounting server     5-30

address pool     6-6

authentication server     5-5

authorization server     5-21

DHCP server     5-36

event class     10-18

filter (traffic management)     15-40

filter rule (traffic management)     15-15

group (external) (user management)     14-84

group (internal) (user management)     14-45

IKE proposal     7-32

NAT rule     15-55

network list     15-9

NTP host     5-41

OSPF area     8-12

security association (traffic management)     15-29

SMTP server for events     10-30

SNMP community     9-13

SNMP event trap destination     10-23

static route, for IP routing     8-5

syslog server to receive events     10-26

user on internal server (user management)     14-122

configuring     15-50

enable     15-51

no public interfaces screen     15-54

add     15-55

modify     15-55

the VPN Concentrator Manager     1-23

problems with     1-3

requirements     1-2

configuring     15-7

IPSec LAN-to-LAN     7-19, 7-24

See NTP     5-38

IPSec LAN-to-LAN     7-16

NAT     15-54

hosts (servers)     5-40

synchronization     5-39

configuring

with reverse route injection     8-21

add     8-12

modify     8-12

factory default (Manager)     1-21

configuring     15-2

section of Manager     15-1

configuring

configuring system-wide parameters     7-3

data compression     14-38, 14-80

accounting, configuring     5-28

accounting record attributes     5-28

authentication server, configuring     5-5

authorization server, configuring     5-21

Cisco Secure ACS RADIUS server     14-1

Class attribute format to authenticate group name     14-42

configuring     14-101

saves log file     10-8

configuring, system     8-18

browser     1-2

Internet Explorer     1-2

JavaScript     1-2

Netscape Navigator     1-2

configuring on Ethernet interface     3-15

with network autodiscovery     7-24

with reverse route injection     8-21

network autodiscovery     7-24

reverse route injection      7-24

add security association to, on filter     15-46

assign to filter (traffic management)     15-43

change security association on     15-48

filter, configuring     15-11

add     15-55

modify     15-55

login     1-4

login, using HTTPS     1-20

add to rule on filter     15-46

change on rule     15-48

configuring     15-24

default, table     15-26, 15-27

IKE proposals in     15-24

negotiation phases     15-24

authorization

configuring

deleting internal authentication     5-14

testing

testing authentication     5-14

maximum permitted     11-5

add     10-30

modify     10-30

configuring internal server     9-10

event trap destinations, configuring     10-21

traps, configuring "well-known"     10-11

add     9-13

modify     9-13

enabling     12-3

image files     12-2

and firewalls     14-25, 14-67

requires Mode Configuration     14-16, 14-60

configuring internal server     9-18

host key     9-18

server key     9-18

server key regeneration     9-19

session key     9-18

client authentication     9-16

configuring internal server     9-14

installing in browser     1-5

installing with Internet Explorer     1-6

installing with Netscape     1-13

viewing with Internet Explorer     1-11

viewing with Netscape     1-18

VPN Concentrator     1-5

add     8-5

modify     8-5

add     10-26

modify     10-26

configuring internal server     9-8

configuring internal server     9-8

shareware client     9-8

and automatic software update     12-1

configuring internal server     9-6

"well-known"     10-11

destination systems     10-21, 10-23

general events     10-11

specific events     10-20

consult event log     10-5

configuring     7-2

section of Manager     7-1

bootcode     xiv

memory     xiv

See base group     14-4

configuring     14-3

section of Manager     14-1

add     14-122

delete     14-121

modify     14-122

with Internet Explorer     1-11

with Netscape     1-18

configuration     13-5

IP address     13-1

master     13-1

route advertisement     8-22

software update     12-1

logging in     1-21

navigating     1-23

organization of     1-22

sidebar (figure)     1-23

configuring     8-18

and Mode Configuration     14-16, 14-60

configure transport mode     15-31

L2TP over IPSec support     7-1, 14-8, 14-52, 14-128

PPTP support     14-7, 14-52, 14-128

configuring as system management protocol     9-20