Table of Contents

Index

A

aggressive mode     1 -5

algorithms

authentication     1 -5

data compression     1 -6

encryption     1 -5

authentication

algorithms     1 -5

extended     1 -6

features     1 -6

mode     1 -5

type     3 -3

B

backup server     3 -4

batch files

erasing saved password     4 -2

C

certificate

contents     5 -2

distinguished name     3 -5

enrolling a CA     5 -6

enrollment     5 -2

example     5 -3

hash of contents     3 -5

management     5 -1

management operations     5 -4

name     3 -4

passwords     5 -3

path name     3 -5

peer     1 -6

root     5 -2

store     3 -4, 5 -1

tags     5 -3

user     5 -1

change password operation     5 -5

command-line interface

connect     3 -2

disconnect     4 -3

displaying commands     4 -1

logging     4 -6

minimum argument     5 -1

notify     4 -7

stat     4 -3

commands

tar     2 -4

zcat     2 -4

connection types     1 -2

D

data compression     1 -6

data formats     ix

delete operation     5 -4

delete with reason     1 -4

DHCP request     1 -3

Diffie-Hellman groups     1 -5

disconnecting the VPN client     4 -3

displaying available commands     4 -1

DNS server     1 -3

documentation

conventions     viii

related     viii

E

enabling VPN service     2 -5

encrypt group password     3 -3

encryption algorithm     1 -5

encrypt user password     3 -3

enroll file operation     5 -5

enrolling a CA for certificates     5 -2, 5 -6

enrollment keywords     5 -6

enroll operation     5 -5

enroll resume operation     5 -5

eraseuserpwd parameter     4 -2

ESP keepalives     3 -4

export operation     5 -5

extended authentication     1 -6

F

features

authentication     1 -6

IPSec     1 -4

program     1 -3

VPN client     1 -2

FQDN (fully qualified domain name)     5 -2

G

group name     3 -3

group password     3 -3

H

hash     3 -5, 5 -2

host name     1 -3, 3 -3

I

IKE keepalives     1 -4, 3 -4

IKE protocols     1 -1

import operation     5 -5

installer contents     2 -1

install script

Linux     2 -6

Solaris     2 -7

introduction     1 -1

IP chains     2 -3

IP protocol     1 -2

IPSec

attributes     1 -5

features     1 -4

through NAT     3 -4

IPSec group

name     3 -3

password     3 -3

K

keepalives     1 -4, 3 -4

kernel version

changing     2 -3

requirements     2 -2

key size     5 -2

keywords for enrollment operations     5 -6

L

libraries     2 -2

list operation     5 -4

local LAN access     1 -3, 3 -4

logging commands     4 -6

M

main mode     1 -5

mode

aggressive     1 -5

authentication     1 -5

configuration     1 -6

main     1 -5

NAT     3 -4

tunnel encapsulation     1 -6

MTU size     1 -3

N

NAT mode     3 -4

NAT transparency     3 -4

NAT transversal     3 -4

notifications, from VPN device     1 -3

notify command     4 -7

O

operations for certificate management     5 -4

P

password

group     3 -3

IPSec group     3 -3

overriding     4 -2

string     3 -3

user profile     3 -3

peer certificate     1 -6

peer timeout     3 -4

ports

TCP     3 -4

preconfigured keys     2 -2

prerequisites

passwords     2 -2

profiles     3 -1

program features     1 -3

protocols

DHCP     1 -3

IKE     1 -1

IP     1 -2

PPP     1 -2

TCP     3 -4

UDP     1 -3, 2 -3

R

Red Hat Software     2 -2

root certificates     5 -2

S

SA (security association)     1 -4

save user password     3 -3

shared keys

authentication type     3 -3

Diffie-Hellman group     3 -5

single SA     1 -4

smart cards     1 -6

split DNS     1 -5

split tunneling     1 -4, 1 -5

statistics     4 -3

supported VPN devices     1 -1

system adminstrator     2 -2

system requirements     2 -2

T

tar command     2 -4

TCP protocol     3 -4

terminate connections     1 -1

transparent tunneling     1 -4

tunneling

encapsulation mode     1 -6

protocol     1 -3

split     1 -5

U

UDP protocol     1 -3

UltraSPARC computer     2 -3

uninstalling an old client     2 -1

unpacking the VPN client files     2 -4

user authentication     1 -3, 1 -6

user certificates     5 -1

user name     3 -3

user password     3 -3

user profiles

certificate

keywords     5 -1

creating     3 -2

described     3 -1

example     3 -1

location     3 -1

parameters     3 -2

V

verify operation     5 -4

viewing the logging files     4 -6

view operation     5 -4

VPN client

defined     1 -1

features     1 -2

vpnclient connect command     3 -2

vpnclient disconnect command     4 -3

vpnclient stat command     4 -3

VPN devices     1 -1

X

X.509 certificates     1 -1

XAUTH (extended authentication)     1 -6

Z

zcat command     2 -4