Table of Contents

Index

Numerics

100 LED (Ethernet)     B-7

A

access control list, administration     8-7

add     8-9

modify     8-9

accessing the CLI     A-2

access rights, configuring for administrators     8-5

access rights section, administration     8-1

access settings, general, for administrators     8-11

accounting statistics     17-3

Active Sessions LED     B-6

Activity LED

SEP-E     B-8

add

access control list, administration     8-9

address pools

statistics     17-5

administering the VPN Concentrator     1-1

administration, access control list     8-7

add     8-9

modify     8-9

administration section of Manager     1-1

administrators

access rights     8-1, 8-5

access settings, general     8-11

configuring     8-2

default passwords     8-3

default rights, table     8-4

file rights     8-6

locking configuration     2-7

modify properties     8-4

parameters in nonvolatile memory     8-2

predefined     8-2

session idle timeout     8-11

admin password, default     8-3

ARP table     17-82

authentication

using digital certificates     10-1

authentication statistics     17-9

authorization statistics     17-14

B

back panel display (monitoring)     15-3

Bad IP Address error     B-5

bandwidth management

statistics     2-8, 17-17

bibliography     xiii

bootcode

filename     15-2

version     15-2

bootcode, upgrading     xii

browser

Back or Forward button displays incorrect screen or incorrect data     B-2, B-3

clear cache after software update     3-4

Refresh / Reload button logs out the Manager     B-2, B-5

C

CA, See also Certificate Authority

CA certificates

configuring     10-58

definition     10-1

installing     10-46

caching, CRL     10-1

cancelling an enrollment request     10-70

certificate

PEM-encoded     10-18

certificate, See also digital certificates

Certificate Authority

definition     10-1

table     10-33

Certificate Revocation List (CRL)

caching     10-1, 10-58, 10-60

retrieval     10-60

viewing cache     10-53

Certificate Revocation List (CRL) checking     10-19, 10-58

enabling     10-19

on slow network     10-58

clear event log     14-4

CLI

accessing     A-2

via console     A-2

via SSH     A-3

via Telnet     A-3

access rights     A-9

entering values     A-5

errors     B-5

help command     A-8

main menu     A-4

menu reference     A-10

menus, navigating     A-7

saving configuration file     A-9

specifying configured items     A-6

starting     A-4

stopping     A-9

using     A-1, A-5

using Back and Home     A-8

using shortcut numbers to navigate     A-7

Coll LED (Ethernet)     B-7

Command Line Interface

See CLI

compliance standards     C-10

compression

statistics     17-19

configuration files

automatic backup with file upload     9-8

changes with software update     3-2

for troubleshooting     B-2

handling at reboot or shutdown     4-3

handling during file upload     9-8

saving

CLI     A-9

swap     9-4

configuring VPN Concentrator with CLI     A-1

console, accessing CLI via     A-2

conventions

documentation     xii

typographic     xii

copying files     9-3

copyrights and licenses     C-1

CPU Utilization LED     B-6

crash

system

saves log file     B-1

CRL checking, See Certificate Revocation List (CRL) checking

CRSHDUMP.TXT file     B-1

D

data

compression, See compression

formats     xv

top ten sessions sorted by     16-19

default

administrator passwords     8-3

administrator rights, table     8-4

delete

digital certificate     10-30, 10-66

enrollment request     10-71

deleting files     9-3

DHCP

statistics     17-23

digital certificates

CA     10-1

Certificate Revocation List (CRL) checking     10-19, 10-58

definition     10-1

deleting     10-30, 10-66

enabling

for IPSec LAN-to-LAN connections     10-27

for remote access connections     10-21

on the VPN Concentrator     10-21

enrolling     10-7, 10-36

expiration     10-19

fields     10-56

generating SSL     10-34

identity     10-1

installed on the VPN Concentrator     10-33

installing     10-7, 10-46, 10-47

installing automatically via SCEP     10-4

maximum allowed     10-1

PKCS-10 request     10-41

renewal     10-63

revocation     10-19

root     10-1

saving in Flash memory     10-1

SCEP-enabled     10-4

SSL     10-2

subordinate     10-1

troubleshooting     10-6

viewing and managing on VPN Concentrator     10-31

viewing details     10-55

X.509     10-1

DNS

statistics     17-25

documentation

additional     xii

cautions     xiv

conventions     xii

notes     xiv

tips     xiv

duration, top ten sessions sorted by     16-22

dynamic filters     13-1

configuring

in Cisco Secure ACS     13-5

on a RADIUS server     13-4

snytax     13-3

E

encryption algorithms used by sessions (monitoring)     16-16

enrolling

certificates     10-36

identity certificate via SCEP     10-43

enrollment request

cancelling     10-70

creating     10-36

deleting     10-71

PKCS-10     10-41

removing according to status     10-34

status table     10-34

viewing details     10-68

entering values with CLI     A-5

error

an error has occurred ...     B-3

insufficient authorization     B-4

not allowed     B-4

errors

and troubleshooting     B-1

an error has occurred ...     B-3

bad IP address     B-5

CLI     B-5

insufficient authorization     B-4

invalid login     B-2, B-3

JavaScript     B-3

no such interface supported (IE)     B-4

not allowed     B-4

not found     B-4

old browser     B-3

out of range value     B-5

passwords do not match     B-5

session timeout     B-2, B-3

VPN Concentrator Manager     B-2

Ethernet Link Status LEDs     B-6

Ethernet MIB-II statistics     17-84

event log

capacity     14-1

clear (erase)     14-4

download to PC     14-3

filterable     14-1

format of     14-4

get     14-3

live     14-6

monitoring     14-1, 14-6

save     14-3

saved at system reboot     B-1

saved if system crashes     B-1

save on VPN Concentrator     14-4

stored in nonvolatile memory     14-1

view     14-1, 14-3, 14-6

events

statistics     17-27

exiting

from CLI     A-9

Expansion Modules Insertion Status LEDs     B-6

Expansion Modules Run Status LEDs     B-6

export XML configuration file to VPN 3000 Concentrator     9-11

F

fans, cooling (monitoring)     15-4

Fan Status LED     B-6

file access rights, administrators'     8-6

file management on VPN Concentrator     9-1

files

copying     9-3

deleting     9-3

importing XML     9-3

saving     9-2

viewing     9-2

file transfer, TFTP     9-5

file upload to VPN Concentrator     3-1, 9-8

stopping     3-3, 9-8

filtering statistics     17-29

flash memory

corrupting     3-2, 4-1

file transfer via TFTP     9-5

file upload to     9-8

managing files in     9-1

rights to files in     8-6

size of     9-2

space used     9-2

formats

data     xv

front panel display (monitoring)     15-3

G

generating SSL server certificate     10-34

get event log     14-3

H

halt system     4-1

help, CLI     A-8

HTTP

statistics     17-31

I

ICMP MIB-II statistics     17-79

identity certificates

definition     10-1

enrolling     10-36

maximum allowed     10-1

table     10-34

idle timeout for administrator sessions     8-11

IKE proposal

configuring for remote access using digital certificates     10-21

image, software

filenames     3-3

update     3-1

importing files     9-3

indicators

LED     B-6

installing

CA certificates     10-46

CA certificates, automatic method (using SCEP)     10-4

certificates     10-46

enrolled certificates     10-47

identity certificates, automatic method     10-7

interfaces

Ethernet status and statistics     15-8

MIB-II statistics     17-63

Invalid Login or Session Timeout (error)     B-3

Invalid Login or Session Timeout error     B-2

IP MIB-II statistics     17-68

IPSec

statistics     17-34

IPSec LAN-to-LAN connections

enabling digital certificates     10-27

ITU (International Telecommunication Union) standards     10-55

J

JavaScript

error     B-3

L

L2TP

statistics     17-41

LDAP

access     10-58

distribution point defaults     10-61

LED indicators

100 (Ethernet)     B-7

Active Sessions     B-6

Activity (SEP-E)     B-8

Coll (Ethernet)     B-7

CPU Utilization     B-6

Ethernet Link Status     B-6

Expansion Modules Insertion Status     B-6

Expansion Modules Run Status     B-6

Fan Status     B-6

Link (Ethernet)     B-7

Power (SEP)     B-8

Power Supplies

front panel     B-6

Status (SEP)     B-8

status, front panel     15-19

System     B-6

table     B-6

Throughput     B-6

Tx (Ethernet)     B-7

usage gauge     B-7

licenses and copyrights     C-1

Link LED (Ethernet)     B-7

load balancing

statistics     17-45

locked configuration     2-7

logging out all sessions     2-2

M

main menu, CLI     A-4

managing digital certificates on VPN Concentrator     10-31

managing VPN Concentrator with CLI     A-1

maximum number of certificates allowed     10-1

memory, SDRAM     15-3

memory, system

viewing status and data     15-5, 15-7

memory, upgrading     xii

menus, CLI, navigating     A-7

MIB-II

statistics     17-62

model number, system     15-2

modify

access control list, administration     8-9

properties of administrators     8-4

monitoring

screens, automatic refresh     7-1

section of Manager     11-1

N

navigating

CLI menus     A-7

nonvolatile memory     8-2

event log stored in     14-1

No such interface supported

error     B-4

Not Allowed

error     B-4

Not Allowed (error)     B-4

Not Found

error     B-4

notices, regulatory agency     C-10

O

old browser (error)     B-3

OSPF

MIB-II statistics     17-73

Out of Range value (error)     B-5

P

password

default administrator     8-3

Passwords do not match

error     B-5

PEM-encoded certificate     10-18

ping a host     6-1

PKCS-10

enrollment request     10-41

power, turning off     4-1

Power LED (SEP)     B-8

power status (monitoring)     15-11

Power Supplies LEDs

front panel     B-6

PPTP

statistics     17-50

prerequisites, system administrator     ix

private keys

saving in Flash memory     10-1

protocols, session (monitoring)     16-11

Public Key Certificate Syntax-10 See PKCS-10

Public Key Infrastructure (PKI)     10-1

R

reboot status screens     5-1

reboot system     4-1

saves log file     4-1, B-1

redundancy

SEP modules     15-13

re-enrolling a certificate     10-63

references (bibliography)     xiii

refresh Monitoring screens     7-1

regulatory agency notices     C-10

re-keying a certificate     10-63

remote access connections

enabling digital certificates     10-21

renewing digital certificates     10-63

RFC 2459     10-55

RIP

MIB-II statistics     17-71

root CA certificate     10-1

routing table (monitoring)     12-1

S

save event log     14-4

SAVELOG.TXT file     B-1

SAVELOG.TXT file     4-1

saving configuration file with CLI     A-9

saving files     9-2

SCEP

configuring     10-52

enrolling an identity certificate     10-43

enrolling SSL certificate     10-44

installing CA certificates     10-4

installing identity certificates     10-7

SCEP-enabled certificate     10-4

troubleshooting     10-6

SDRAM memory     15-3

Secure Sockets Layer, See SSL     10-1

security associations (SA)

configuring for remote access using digital certificates     10-23

self-signed certificates

CA certificates     10-1

SSL     10-2

SSL certificate, generating     10-34

SEP modules

functions performed     15-13

redundancy     15-13

status and statistics     15-13

used by sessions (monitoring)     16-14

sessions

active (administration)     2-1

active (monitoring)     16-1

count, definition     2-3, 16-3

data (monitoring)     16-1

detail     2-8, 16-7

parameter definitions     2-9

encryption algorithms used     16-16

logout all     2-2

maximum permitted     2-3, 16-3

parameter definitions     2-7, 16-6

protocols (monitoring)     16-11

SEP modules used     16-14

statistics (administration)     2-1

top ten     16-18

by data     16-19

by duration     16-22

by throughput     16-25

Session Timeout (error)     B-3

Session Timeout error     B-2

shutdown options     5-1

shutdown system     4-1

SNMP

MIB-II statistics     17-87

software image

filenames     3-3, 15-3

update on VPN Concentrator     3-1

stopping     3-3

version info     3-3, 15-3

SSH

accessing CLI     A-3

statistics     17-54

SSL

statistics     17-55

SSL certificate     10-2

enrolling     10-36

enrolling via SCEP     10-44

generating     10-34

standards

ITU     10-55

RFC2459     10-55

X.509     10-55, 10-58

X.520     10-55

standards compliance     C-10

starting the CLI     A-4

statistics     17-1

accounting     17-3

address pools     17-5

authentication     17-9

authorization     17-14

data compression     17-19

DHCP     17-23

DNS     17-25

events     17-27

filtering     17-29

HTTP     17-31

IPSec     17-34

L2TP     17-41

load balancing     17-45

MIB-II     17-62

ARP table     17-82

Ethernet     17-84

ICMP     17-79

interfaces     17-63

IP traffic     17-68

OSPF     17-73

RIP     17-71

SNMP     17-87

TCP/UDP     17-65

PPTP     17-50

sessions (administration)     2-1

SSH     17-54

SSL     17-55

Telnet     17-57

VRRP     17-59

Status LED

SEP     B-8

stopping

CLI     A-9

file upload to VPN Concentrator     3-3, 9-8

the VPN Concentrator     4-1

subordinate CA certificate     10-1

superuser See administrators

swap configuration files     9-4

System LED     B-6

system reboot     4-1

system shutdown     4-1

system status (monitoring)     15-1

T

TCP/UDP MIB-II statistics     17-65

Telnet

accessing CLI     A-3

statistics     17-57

temperature sensors (monitoring)     15-4

TFTP

file transfer     9-5

throughput, top ten sessions sorted by     16-25

Throughput LED     B-6

timeout, administrator     8-11

live event log overrides     14-6

top ten sessions (monitoring)     16-18

troubleshooting     B-1

consult event log     14-1

files created for     B-1

Tx LED (Ethernet)     B-7

type (model number), system     15-2

typographic conventions     xii

U

update software on VPN Concentrator     3-1

upgrading

bootcode     xii

memory     xii

upload files to VPN Concentrator     9-8

usage graph

LEDs (monitoring)     15-4

LEDs (table)     B-7

selector button     15-19

using the CLI     A-5

V

viewing

digital certificate details     10-55

digital certificates on VPN Concentrator     10-31

enrollment request     10-68

viewing files     9-2

voltage status     15-11

VPN Concentrator Manager

errors     B-2

VRRP

statistics     17-59

W

workstations allowed administrator access     8-7

X

X.509

digital certificates     10-1

standards     10-55, 10-58

X.520 standards     10-55

XML Export     9-11

Y

You are using an old browser or have disabled JavaScript (error)     B-3