|
|
This chapter tells you how to prepare for, unpack, install, and power up the VPN 3002, and how to begin quick configuration.
To install the VPN 3002, you need the following skills:
You can configure and manage the VPN 3002 using the command-line interface from the console or a Telnet or SSH client. However, for ease of use, we strongly recommend using the VPN 3002 hardware Client Manager, which is HTML-based, from a PC and browser.
The PC must be able to run the recommended browser. The console can be the same PC that runs the browser.
The VPN Hardware Client Manager requires either Microsoft Internet Explorer version 4.0 or higher, or Netscape Navigator version 4.5-4.7 or 6.0. For best results, we recommend Internet Explorer. Whatever browser and version you use, install the latest patches and service packs for it.
Be sure JavaScript and Cookies are enabled in the browser. Refer to the documentation for your browser.
Do not use the browser navigation toolbar buttons Back, Forward, or Refresh / Reload with the VPN 3002 Hardware Client Manager unless instructed to do so. To protect access security, clicking Refresh / Reload automatically logs out the Manager session. Clicking Back or Forward may display stale Manager screens with incorrect data or settings.
We recommend that you hide the browser navigation toolbar to prevent mistakes while using the VPN 3002 Hardware Client Manager.
For ease of use, we recommend setting your monitor or display:
The VPN 3002 Hardware Client ships with the listed in Table 2-1 . Carefully unpack your device and check your contents against this list:
Table 2-1 VPN 3002 Hardware Client Packing List
| Quantity | Item |
|---|---|
Wall mount kit 2 10-16x1 & 2 10-16x1.5 screws and 2 wall anchors |
|
You can place the VPN 3002 on a table or shelf, or you can hang it on the wall.
Connect the RJ45 straight-through serial cable between the console port on the back of the VPN 3002 and the COM1 or serial port on the PC.
If you are using a PC with a browser to manage the VPN 3002, be sure the PC is connected to the same private LAN as the VPN 3002.
If you are using a PC with a browser to manage the VPN 3002-8E, be sure the PC is connected to a switch port that is configured on the same private LAN as the VPN 3002-8E.
Connect network cables between the Ethernet interface on the back of the VPN 3002 and their respective public and private network hub, switch, or device.
The interfaces are (left to right):
Power up the PC/console and the VPN 3002 in the following sequence:
Step 2 If you want to use the command-line interface, start a terminal emulator (HyperTerminal) on the PC. Configure a connection to COM1, with the following port settings:
Set the emulator for VT100 emulation, or let it autodetect the emulation type.
Step 3 Plug in the VPN 3002, which turns on the VPN 3002.
Step 4 The LED(s) on the front panel will blink and change color as the system executes diagnostics.
Step 5 Watch for these LEDs on the VPN 3002 front panel to stabilize and display as follows:
Step 6 Watch for LEDs on the private and public interface ports on the back of the device to display as follows:
If LEDs that should be green are amber or off, see "Troubleshooting and System Errors."
Step 7 If connected, the console displays initialization and boot messages such as:
The VPN 3002 includes a Reset button, so labelled, on the back of the unit. When used carefully, the Reset button resets the VPN 3002 configuration file to factory default values. That is, it eliminates both the configuration (config) file and the backup configuration (config.bak) file, and you have to perform the configuration process from the beginning.
To reset the VPN 3002 to factory default values, perform the following steps:
Step 2 Disconnect the VPN 3002 power supply cord.
Step 3 Reconnect the power supply cord.
Step 4 Immediately insert a thin, pointed object, such as an untwisted paper clip, into the reset button.
Step 5 The VPN 3002 displays messages like those below. In particular, notice the three dots (...) on the line prior to Loading with default configuration.
Step 6 Keep the paper clip in the reset button until the system displays the line, Loading with default configuration, just after the line with the three dots.
The VPN 3002 is rest to factory defaults.
You are now ready to begin quick configuration: configuring minimal parameters to make the VPN 3002 operational. You can use a browser for quick configuration with the VPN 3002 Hardware Client Manager (see "Using the VPN 3002 Hardware Client Manager for Quick Configuration"). While you can use the console instead (see "Using the Command-Line Interface for Quick Configuration"), we recommend using a browser.
Quick configuration consists of these steps:
Step 2 Optionally upload an already existing configuration file.
Step 3 Configure the VPN 3002 private interface. To use Network Extension mode, you must configure an IP address other than the default, which is 192.168.10.1. For Client mode, you do not need to change this address.
Step 4 Configure the DHCP server to assign IP addresses for PCs located on the private network. The default IP address pool is 192.168.10.2-192.168.10.128. For Client mode, you do not need to modify this parameter.
Step 5 Configure the VPN 3002 public interface, using DHCP, PPPoE, or static address assignment. Note that the DHCP client is enabled by default on the public interface.
Step 6 Configure the IPSec parameters with group and usernames and passwords and the IP address of the central-site VPN Concentrator, also known as the IKE peer.
Step 7 Set the VPN 3002 to use either Client or Network Extension mode. Client mode is enabled by default, using Port Address Translation (PAT).
Step 8 If you are using DNS, configure local ISP DNS information for the VPN 3002.
Step 9 Configure static routes.
Step 10 Change the admin password for security.
The easiest way to configure the VPN 3002 is to accept default values for all parameters that have default values. The next sections on PAT mode and Network Extension mode list the information you need if you use default values for quick configuration.
For PAT mode, if you accept default values for all parameters, you need:
For Network Extension mode, if you accept default values for all parameters, you need:
Table 2-2 provides the information you need to set all the parameters for quick configuration. Write your entries here now to save time as you enter data.
Table 2-2 VPN 3002 Quick Configuration Parameters
Posted: Sat Apr 5 08:31:02 PST 2003
All contents are Copyright © 1992--2002 Cisco Systems, Inc. All rights reserved.
Important Notices and Privacy Statement.