This guide is for remote clients who want to set up virtual private network (VPN) connections to a central site. Network administrators can also use this guide for information about configuring and managing VPN connections for remote clients. We assume that you are familiar with the Windows platform and know how to use Windows applications. A network administrator should be familiar with Windows system configuration and management and know how to install, configure, and manage internetworking systems. However, virtual private networks and VPN devices might be new to you.

Organization

This guide is organized as follows:

Chapter Title Description

Chapter 1

Understanding the VPN Client

Briefly explains what the VPN Client is and how it works.

Chapter 2

Installing the VPN Client

Tells you how to install the VPN Client.

Chapter 3

Configuring the VPN Client

Tells you how to configure the VPN Client, including setting optional parameters.

Chapter 4

Connecting to a Private Network

Tells you how to connect to a private network using the VPN Client and an Internet connection; shows how to get status information on your connection.

Chapter 5

Managing the VPN Client

Tells you how to manage VPN Client connections, upgrade or uninstall VPN Client software, reconfigure the VPN Client automatically, use the Log Viewer application and set up special features such as Start Before Logon.

Chapter 6

Enrolling and Managing Certificates

Tells you how to obtain digital certificates to use for authentication and how to manage these certificates on your system.

Appendix A

Copyrights and Licenses

Provides copyright and license information for software that the VPN Client uses.

Chapter	Title	Description
Chapter 1	Understanding the VPN Client	Briefly explains what the VPN Client is and how it works.
Chapter 2	Installing the VPN Client	Tells you how to install the VPN Client.
Chapter 3	Configuring the VPN Client	Tells you how to configure the VPN Client, including setting optional parameters.
Chapter 4	Connecting to a Private Network	Tells you how to connect to a private network using the VPN Client and an Internet connection; shows how to get status information on your connection.
Chapter 5	Managing the VPN Client	Tells you how to manage VPN Client connections, upgrade or uninstall VPN Client software, reconfigure the VPN Client automatically, use the Log Viewer application and set up special features such as Start Before Logon.
Chapter 6	Enrolling and Managing Certificates	Tells you how to obtain digital certificates to use for authentication and how to manage these certificates on your system.
Appendix A	Copyrights and Licenses	Provides copyright and license information for software that the VPN Client uses.

Terminology

In this user guide, the term Cisco VPN device refers to the following Cisco products:

Cisco VPN 3000 Series Concentrator

Cisco VPN 5000 Series Concentrator

Cisco Secure PIX Firewall devices

IOS platform devices, such as the Cisco 7100 Series Routers

Conventions

This document uses the following conventions:

Convention Description

boldface font

User actions and commands are in boldface.

italic font

Arguments for which you supply values are in italics.

screen font

Terminal sessions and information the system displays are in screen font.

boldface screen font

Information you must enter is in boldface screen font.

Convention	Description
boldface font	User actions and commands are in boldface.
italic font	Arguments for which you supply values are in italics.
`screen` font	Terminal sessions and information the system displays are in `screen` font.
boldface screen font	Information you must enter is in boldface screen font.

Notes use the following conventions:

Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the publication.

Cautions use the following conventions:

Caution Means reader be careful. Cautions alert you to actions or conditions that could result in equipment damage or loss of data.

Data Formats

As you configure and manage the system, enter data in the following formats unless the instructions indicate otherwise:

Type of Data Format

IP Addresses

IP addresses use 4-byte dotted decimal notation (for example, 192.168.12.34); as the example indicates, you can omit leading zeros in a byte position.

Subnet Masks and Wildcard Masks

Subnet masks use 4-byte dotted decimal notation (for example, 255.255.255.0). Wildcard masks use the same notation (for example, 0.0.0.255); as the example illustrates, you can omit leading zeros in a byte position.

MAC Addresses

MAC addresses use 6-byte hexadecimal notation (for example, 00.10.5A.1F.4F.07).

Hostnames

Hostnames use legitimate network hostname or end-system name notation (for example, VPN01). Spaces are not allowed. A hostname must uniquely identify a specific system on a network.

Text Strings

Text strings use upper- and lower-case alphanumeric characters. Most text strings are case-sensitive (for example, simon and Simon represent different usernames). In most cases, the maximum length of text strings is 48 characters.

Port Numbers

Port numbers use decimal numbers from 0 to 65535. No commas or spaces are permitted in a number.

Type of Data	Format
IP Addresses	IP addresses use 4-byte dotted decimal notation (for example, `192.168.12.34`); as the example indicates, you can omit leading zeros in a byte position.
Subnet Masks and Wildcard Masks	Subnet masks use 4-byte dotted decimal notation (for example, `255.255.255.0)`. Wildcard masks use the same notation (for example, `0.0.0.255)`; as the example illustrates, you can omit leading zeros in a byte position.
MAC Addresses	MAC addresses use 6-byte hexadecimal notation (for example, `00.10.5A.1F.4F.07)`.
Hostnames	Hostnames use legitimate network hostname or end-system name notation (for example, `VPN01)`. Spaces are not allowed. A hostname must uniquely identify a specific system on a network.
Text Strings	Text strings use upper- and lower-case alphanumeric characters. Most text strings are case-sensitive (for example, simon and Simon represent different usernames). In most cases, the maximum length of text strings is 48 characters.
Port Numbers	Port numbers use decimal numbers from `0` to `65535`. No commas or spaces are permitted in a number.

Obtaining Documentation

The following sections provide sources for obtaining documentation from Cisco Systems.

World Wide Web

You can access the most current Cisco documentation on the World Wide Web at the following sites:

Documentation CD-ROM

Cisco documentation and additional literature are available in a CD-ROM package, which ships with your product. The Documentation CD-ROM is updated monthly and might be more current than printed documentation. The CD-ROM package is available as a single unit or as an annual subscription.

Ordering Documentation

Cisco documentation is available in the following ways:

Registered Cisco Direct Customers can order Cisco Product documentation from the Networking Products MarketPlace:

: http://www.cisco.com/cgi-bin/order/order_root.pl

Registered Cisco.com users can order the Documentation CD-ROM through the online Subscription Store:

: http://www.cisco.com/go/subscription

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco corporate headquarters (California, USA) at 408 526-7208 or, in North America, by calling 800 553-NETS(6387).

Documentation Feedback

If you are reading Cisco product documentation on the World Wide Web, you can submit technical comments electronically. Click Feedback in the toolbar and choose Documentation. After you complete the form, click Submit to send it to Cisco.

You can e-mail your comments to bug-doc@cisco.com.

To submit your comments by mail, for your convenience many documents contain a response card behind the front cover. Otherwise, you can mail your comments to the following address:

Cisco Systems, Inc.
Document Resource Connection
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

Cisco provides Cisco.com as a starting point for all technical assistance. Customers and partners can obtain documentation, troubleshooting tips, and sample configurations from online tools. For Cisco.com registered users, additional troubleshooting tools are available from the TAC website.

Cisco.com

Cisco.com is the foundation of a suite of interactive, networked services that provides immediate, open access to Cisco information and resources at anytime, from anywhere in the world. This highly integrated Internet application is a powerful, easy-to-use tool for doing business with Cisco.

Cisco.com provides a broad range of features and services to help customers and partners streamline business processes and improve productivity. Through Cisco.com, you can find information about Cisco and our networking solutions, services, and programs. In addition, you can resolve technical issues with online technical support, download and test software packages, and order Cisco learning materials and merchandise. Valuable online skill assessment, training, and certification programs are also available.

Customers and partners can self-register on Cisco.com to obtain additional personalized information and services. Registered users can order products, check to see the status of an order, access technical support, and view benefits specific to their relationships with Cisco.

To access Cisco.com, go to the following website:

http://www.cisco.com

Technical Assistance Center

The Cisco TAC website is available to all customers who need technical assistance with a Cisco product or technology that is under warranty or covered by a maintenance contract.

Contacting TAC by Using the Cisco TAC Website

If you have a priority level 3 (P3) or priority level 4 (P4) problem, contact TAC by going to the TAC website:

http://www.cisco.com/tac

P3 and P4 level problems are defined as follows:

P3—Your network performance is degraded. Network functionality is noticeably impaired, but most business operations continue.
P4—You need information or assistance on Cisco product capabilities, product installation, or basic product configuration.

In each of the above cases, use the Cisco TAC website to quickly find answers to your questions.

To register for Cisco.com, go to the following website:

http://www.cisco.com/register/

If you cannot resolve your technical issue by using the TAC online resources, Cisco.com registered users can open a case online by using the TAC Case Open tool at the following website:

http://www.cisco.com/tac/caseopen

Contacting TAC by Telephone

If you have a priority level 1(P1) or priority level 2 (P2) problem, contact TAC by telephone and immediately open a case. To obtain a directory of toll-free numbers for your country, go to the following website:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

P1 and P2 level problems are defined as follows:

P1—Your production network is down, causing a critical impact to business operations if service is not restored quickly. No workaround is available.
P2—Your production network is severely degraded, affecting significant aspects of your business operations. No workaround is available.

Table of Contents