VPN Client Auto-Update Feature with VPN 3000 Concentrator Configuration Example

Document ID: 100248

PDF Downloads

Related Discussion

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
Configure the VPN Client Auto-Update Feature
Cisco Support Community - Featured Conversations
Related Information

Introduction

This document describes how to configure the Cisco VPN Client auto-update feature in the Cisco VPN 3000 Concentrator with Update Server.

Note: These auto-update features are not supported on the Cisco Routers and Cisco Security Appliances (PIX/ASA).

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on the Cisco VPN Client version 4.6 and later.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Configure the VPN Client Auto-Update Feature

Download the update package to a folder on your Update Server.

You can download the update package from the Cisco software download page (registered customers only) . The package contains these files:
- vpnclient-win-is-<version>-k9.exe—For the Installshield.
- vpnclient-win-msi-<version>-k9.exe—For the MSI install.
- binary_config.ini
- sig.dat
Note: Refer to Getting the Updated Software from Cisco Systems for more information on various objects.

Create a text file that contains this text:

[Update]
Version=1
FileName=profiles.zip
MaxSize=7000

[Oem]
FileName=oem.zip
MaxSize=10000

[Transform]
Filename=transform.zip
MaxSize=12000

[Autoupdate]
Required=1

Refer to Creating the New Update Configuration File for more information about the values in this file.

Name the file new_update_config.ini, and save it to the same web folder.
Create a profiles.zip folder where all the updated PCF files are stored. Refer to Creating the Profile Distribution Package for more information.
Make sure that the web folder is accessible by the VPN Client when it is connected to the VPN server.

In order to test this accessibility, connect the VPN Client, open a web browser, and explore the URL where the auto-update files are located. Make sure that all files can be downloaded. If you are unable to access the web folder or download a file, you must configure the MIME settings (or equivalent) and appropriate permissions for your web or update server. If you are unable to configure this, contact technical support for your web server for further assistance.
On the VPN Concentrator, go to Configuration > System > Client Update > Entries, and add this client update information:
- Client Type = Windows
- URL = http://10.199.248.159/vpnclient_auto_update/ (for example)
- Revisions = 4.8.1.300
Go to Configuration > System > Client Update > Enable, and check the Enable check box in order to enable the Client Update feature.
Click Add or Apply.