Cisco 3002 - VPN Hardware Client Manual de usuario descargar pdf (Pagina 4)

Release 3.5 New Software Features

Release Notes for Cisco VPN 3002 Hardware Client Release 3.5.2

To use IPSec over TCP, both the VPN 3002 and the VPN Concentrator to which

it connects must be running version 3.5 software.

Interactive Hardware Client Authentication

Interactive hardware client authentication provides the central site with additional

security by requiring the VPN 3002 to authenticate with a username and password

that you enter manually each time the VPN 3002 initiates a tunnel. With this

feature enabled the VPN 3002 does not have a saved username and password.

When the VPN 3002 initiates the tunnel, it sends the username and password to

the VPN Concentrator to which it connects. The VPN Concentrator facilitates

authentication on either the internal or an external server. If the username and

password are valid, the tunnel is established.

You configure interactive hardware client authentication on a group basis on the

VPN Concentrator at the central site, which then pushes the policy to the VPN

3002.

Individual User Authentication

Individual user authentication protects the central site from access by

unauthorized persons on the same LAN as the VPN 3002.

When you enable individual user authentication, each user that connects through

a VPN 3002 must open a web browser and manually enter a valid username and

password to access the network behind the VPN Concentrator, even though the

tunnel already exists.

Note You cannot use the command-line interface to log in if user authentication is

enabled. You must use a browser.

• If your browser points to a default home page, or to a website on the remote

network behind the VPN Concentrator, the VPN 3002 directs the browser to

the proper pages for user login. When you successfully log in, the browser

displays the page you originally entered.

1 2 3 4 5 6 7 8 9 ... 17 18

Sin comentarios

Cisco 3002 - VPN Hardware Client Manual de usuario Pagina 4