Index

Index
Numerics
A
B
C
D
E
F
G
H
I
J
L
M
N
O
P
Q
R
S
T
U
V
W
X

Index

Numerics

3DES-168/SHA SSL encryption algorithm 8-7

3DES-168 SSH encryption algorithm 8-10

A

accessing the CLI 14-1

access rights

administration 12-9

default Monitor administrator (CLI) 14-6

access settings, general, for administrators 12-12

Address Resolution Protocol (ARP) mapping table 13-47

administering the VPN 3002 12-1

administration_file_management 12-12

administrators

access rights 12-9

access settings, general 12-12

configuring 12-9

parameters saved in nonvolatile memory 12-10

password 12-10

predefined 12-10

properties and rights, changing 12-9

session idle timeout 12-12

authentication

using digital certificates 12-17

B

Back and Home CLI choices 14-5

backup configuration file

swapping 12-14

use in troubleshooting B-2

backup server list 6-3

backup servers

configuring 6-2

DNS and WINS servers 6-3

overview 6-3

Bad IP Address (error) B-10

bidirectional tunnel endpoint 6-1

boot configuration file, swapping 12-14

browser

Back or Forward button displays incorrect screen or incorrect data B-7

clear cache after software update 12-4

installing SSL certificate 1-3

navigation toolbar, don't use with Manager 1-2

requirements 1-1

C

CA, See also Certificate Authority

CA certificates

definition 12-17

installing 12-49

cancelling an enrollment request 12-65

certificate

PEM-encoded 12-30

certificate, See also digital certificates

Certificate Authority

definition 12-17

certificate management 12-17

changing administrator properties and rights 12-9

CLI

accessing 14-1

via console 14-1

via Telnet 14-2

Back and Home choices 14-5

choosing a menu item 14-3

configuration menu 14-7

entering values 14-3

errors B-10

help command 14-5

main menu 14-2, 14-7

menu reference 14-7

navigating with shortcut numbers 14-4

prompt contains menu context 14-3

saving configuration file 14-6

shortcut numbers 14-4

starting 14-2

stopping 14-6

using 14-1, 14-3

client mode

definition 11-2

effect on backup server connection 6-4

D

data formats xxxi

data initiation

VPN 3002 and central-site concentrator 11-5

default

Monitor administrator access rights (CLI) 14-6

delete

digital certificate 12-32, 12-62

enrollment request 12-66

DES-40/SHA Export SSL encryption algorithm 8-7

DES-56/SHA SSL encryption algorithm 8-7

DES-56 SSH encryption algorithm 8-10

DHCP 7-8

digital certificates

CA 12-17

definition 12-17

deleting 12-32, 12-62

enabling on the VPN 3002 12-31

enrolling 12-20, 12-39

fields 12-56

generating SSL 12-35

identity 12-17, 12-34

installing 12-20, 12-50

installing automatically via SCEP 12-18

managing 12-17

PKCS-10 request 12-45

renewal 12-59

root 12-17

saving in Flash memory 12-17

SCEP-enabled 12-18

SSL 1-3, 12-17

troubleshooting 12-20

viewing and managing on VPN 3002 12-33

viewing details 12-55

X.509 12-17

disabling the public interface 3-5

display/PC monitor, recommended settings 1-2

DNS

backup server, configuring 6-3

documentation

additional xxix

cautions xxx

notes xxx

downloading

backup server list from a VPN Concentrator 6-4

E

encryption algorithms

SSH 8-10

SSL 8-7

enrolling

certificates 12-39

identity certificate via SCEP 12-46

enrollment request

cancelling 12-65

creating 12-39

deleting 12-66

PKCS-10 12-45

removing according to status 12-37

status table 12-37

viewing details 12-63

entering values with CLI 14-3

error

an error has occurred ... B-7

bad IP address B-10

CLI B-10

insufficient authorization B-8

invalid login B-5

Manager unexpectedly logs out B-6

message displays B-7

no such interface supported (IE) B-9

not allowed B-8

not found B-9

out of range value B-10

passwords do not match B-10

session timeout B-5

VPN 3002 Hardware Client Manager B-5

event

definition 9-1

event log

format 9-3

saved on system crash or reboot B-1

exiting from CLI 14-6

F

file management on VPN 3002 12-13

file upload to VPN 3002 12-2, 12-15

stopping 12-3, 12-15

flash memory

corrupting 12-2, 12-5

managing files 12-13

temporary files in 12-15

format

data xxxi

syslog 9-3

fragmentation policy

IPSec 3-7

G

generating SSL server certificate 12-35

H

halting the VPN 3002 12-5

help, CLI 14-5

Home and Back CLI choices 14-5

HTTP

enabling 8-2

port number 8-2

using with Manager 1-2

HTTPS

connecting using 1-16

definition 1-3

enabling 8-2

enabling on public interface for XML support 8-11

port number 8-2

I

ICMP

PING 12-7

identifying servers to the VPN 3002 5-1

identity certificates

definition 12-17

enrolling 12-39

installed on the VPN 3002 12-34

maximum allowed 12-17

idle timeout

administrator sessions 12-12

IEEE standard 802.3, Ethernet networks 13-49

IKE proposals, valid for VPN3002 A-1

image, software

filenames 12-3

indicators, LED B-2

individual user authentication

installing

CA certificates 12-49

CA certificates, automatic method (using SCEP) 12-18

enrolled certificates 12-50

identity certificates, automatic method 12-20

SSL certificate

with Internet Explorer 1-4

with Netscape 1-9

Install SSL Certificate (screen) 1-4

interactive hardware client authentication

interfaces

private, configuring 3-3

public, configuring 3-5

Internet Explorer, requirements 1-1

Invalid Login or Session Timeout (error) B-5

IPSec

attributes configurable on the central-site concentrator 6-2

configuring 6-1

IPSec fragmentation 3-7

IPSec over TCP 6-5

requirements 6-5

ITU (International Telecommunication Union) standards 12-55

J

JavaScript, requirements 1-2

L

lease period, DHCP 7-6

LED indicators

table B-2

live event log

Netscape requirements 13-5

log file

saving on system reboot 12-5

logging in to the VPN Concentrator Manager 1-17

name, factory default (Manager) 1-17

password, factory default (Manager) 1-17

screen 1-3

HTTPS 1-17

HTTPS using Internet Explorer 1-8

HTTPS using Netscape 1-14

using CLI 14-2

using interactive hardware client authentication and individual user authentication 1-20

M

main menu, CLI 14-2, 14-7

Manager table of contents 1-28

Manager unexpectedly logs out (error) B-6

managing digital certificates on VPN 3002 12-33

managing VPN Concentrator with CLI 14-1

choosing a menu item in CLI 14-3

context in CLI prompt 14-3

menu reference, CLI 14-7

Microsoft Internet Explorer script error message B-9

MTU 3-7

N

NAT (Network Address Translation)

definition 11-2

navigating

the VPN 3002 Hardware Client Manager 1-28

Netscape Navigator, requirements 1-1

Network Address Translation See NAT

Network Extension mode 11-3

effect on backup server connection 6-4

required settings on VPN Concentrator 11-4

nonvolatile memory 12-10

No such interface supported (error) B-9

Not Allowed (error) B-8

Not Found (error) B-9

O

options configurable only on central-site Concentrator 7-8

Out of Range value (error) B-10

P

password

administrator 12-10

factory default (Manager) 1-17

Passwords do not match (error) B-10

PAT mode

configuring 11-7

definition 11-2

enabling 11-7

many-to-one translation 11-7

required settings on VPN Concentrator 11-3

PC monitor/display, recommended settings 1-2

peer 6-1

PEM-encoded certificate 12-30

ping a host 12-7

PKCS-10

enrollment request 12-45

policy management 11-1

Port Address Translation mode See PAT mode

port number

HTTP 8-2

HTTPS 8-2

SNMP 8-4

SSH 8-9

syslog server 9-11

Telnet 8-3

Telnet over SSL 8-3

power, turning off 12-5

PPPoE 3-5

statistics 13-34

PPP over Ethernet See PPPoE

prerequisites, system administrator xxvii

preshared keys 6-5

private interface

configuring 3-3

private keys, saving in Flash memory 12-17

public interface

configuring 3-5

Public Key Certificate Syntax-10 See PKCS-10

Public Key Infrastructure (PKI) 6-5, 12-17

Q

Quick Configuration 2-1

R

RC4-128 SSH encryption algorithm 8-10

RC4-40/MD5 Export SSL encryption algorithm 8-7

reboot

handling configuration files 12-6

reloads the boot configuration file 12-14

saving log file 12-5, B-1

system 12-5

re-enrolling a certificate 12-59

re-keying a certificate 12-59

remote server

configuring 6-2

renewing a DHCP lease 7-6

renewing digital certificates 12-59

requirements

browser 1-1

Internet Explorer 1-1

IPSec over TCP 6-5

JavaScript 1-2

Netscape Navigator 1-1

RFC 1650, Ethernet interface MIB objects 13-49

RFC 1907, SNMP version 2 MIB objects 13-52

RFC 2011, ARP table entries 13-47

RFC 2011, IP and ICMP MIB objects 13-43, 13-45

RFC 2012,TCP MIB objects 13-39

RFC 2013, UDP MIB objects 13-39

RFC 2459 12-55

root CA certificate 12-17

RRC4-128/MD5 SSL encryption algorithm 8-7

RSA key, SSH 8-9

S

SAVELOG.TXT file 12-5, B-1

saving

configuration file with CLI 14-6

log file on system reboot 12-5

SCEP

enrolling an identity certificate 12-46

enrolling SSL certificate 12-47

installing CA certificates 12-18

installing identity certificates 12-20

SCEP-enabled certificate 12-18

troubleshooting 12-20

screen

secure connection

T

table of contents, Manager 1-28

Telnet

accessing CLI 14-2

enabling 8-3

port number 8-3

Telnet over SSL

port number 8-3

timeout, administrator 12-12

traffic management, configuring 11-1

troubleshooting

crash dump file B-1

event log B-1

files created for B-1

using configuration files B-2

tunnel

endpoint 6-1

functional description 6-1

initiation 11-5

protocols 6-1

U

updating software on VPN 3002 12-2

upload files to VPN 3002 12-15

user status 13-14

using the CLI 14-3

using the VPN Concentrator Manager 1-1

V

valid IKE proposals A-1

viewing

digital certificate details 12-55

digital certificates on VPN 3002 12-33

enrollment request 12-63

SSL certificates

with Internet Explorer 1-8

with Netscape 1-14

VPN 3002 status, sessions, statistics, and event logs 13-1

VPN 3002 Hardware Client Manager

errors B-5

navigating 1-28

organization 1-27

window 1-23

VPN Concentrator Manager

logging in 1-17

using 1-1

W

WINS

backup server, configuring 6-3

X

X.509

digital certificates 12-17

standards 12-55

X.520 standards 12-55

XML

configuring 8-11

enabling 8-11

Table of Contents

Index

Numerics

A

B

C

D

E

F

G

H

I

J

L

M

N

O

P

Q

R

S

T

U

V

W

X