© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 11 Configure the Cisco Virtual Private Network 3002 Hardware Client for Unit and User Authentication

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon completion of this lesson, you will be able to perform the following tasks: Describe the Hardware Client interactive unit and user authentication feature. Configure the Hardware Client for interactive unit authentication. Configure the Hardware Client for user authentication. Monitor the Hardware Client user statistics.

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview of the Hardware Client Interactive Unit and User Authentication Features

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Default Unit Authentication Hardware Client Unit authentication Authentication Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Authentication Options Interactive unit authentication Authentication server Internet User authentication Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Hardware Client Interactive Unit Authentication Feature

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Interactive Unit Authentication Concentrator Configuration Internet Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Interactive Unit Authentication Hardware Client Configuration Internet Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Connection Methods

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 1Connect via the Hardware Client Manager

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 2Connect via the System Status Window

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 3Connect via the Redirect Message

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client IPSec Parameters

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Hardware Client User Authentication Feature

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client User Authentication Feature User authentication Internet Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN User Authentication Feature Concentrator Configuration Internet Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN User Authentication Feature Hardware Client Configuration Internet Hardware Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Connection Methods

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 1Connect via the Hardware Client Manager

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 2Connect via the System Status Window

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Method 3Connect via the Redirect Message

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Monitoring the Hardware Client User Statistics

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client User Status

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator User Status

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary There are three authentication options available on the Hardware Client: unit authentication, interactive unit authentication, and individual user authentication. Interactive unit and individual user authentication are enabled or disabled on the Concentrator. There are three ways to access interactive unit and individual user authentication prompts: connect via the Hardware Client Manager, connect via the system status window, or connect via the redirect message.

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective P.0 Student PP P.0 RTS Cisco VPN 3000 Series Concentrator Web FTP.10.1PP PP.0