© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 4 Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon completion of this lesson, you will be able to perform the following tasks: Describe the Cisco VPN 3000 Concentrator Series. Identify the Cisco VPN 3000 Concentrator Series models. Describe the Cisco VPN 3000 Concentrator Series features and functions.

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Concentrator Series VPN 3030 regional office VPN 3060 or 3080 central site VPN 3030 regional office VPN 3005 or 3015 branch office Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Product Hardware Portfolio BranchRegionalCentral site ,000 Cisco VPN 3000 Concentrator Series The goal is to provide products that cover the entire spectrum of customer VPN applications, making Cisco the only choice for CPE and service providers of all sizes , ,500

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Models

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3005 Concentrator 100–240V power supply PublicPrivate

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Private V power supplies load sharing Public External Cisco VPN 3015 Concentrator 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3030 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3060 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module Slots

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3080 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Front LEDs

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Front LEDs (cont.)

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Rear LEDs

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Back Panel Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots Console

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Product Comparison

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Benefits and Features

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN POWER STATUS SEP-200U SEP/SEP-E DSP-based hardware encryption1,500 to 5,000 simultaneous sessions SEPProvides DES and 3DES hardware-based encryption SEP-EProvides DES, 3DES, and AES hardware-based encryption

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN SEP/SEP-E Redundancy Redundancy Top-to-bottom Side-to-side SEP/SEP-E redundancy Failover SEP/SEP-E redundancy

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Redundancy VRRP Internet Server Private network Public network Master Slave

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Backup LAN-to-LAN Central SiteRemote Site

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load Balancing Server Internet Private network Public network Master Non-master

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client Support

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client Support Clients Windows Linux Solaris Mac Certicom Secure VPN session Corporate office Web server File server Internet Access Analog ISDN DSL Cable Wireless Tunneling protocols IPSec L2TP over IPSec PPTP L2TP

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Software Client Cisco VPN Windows Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Client Firewall Features AYT Yes Are You There (AYT)? Push CPP Centralized Protection Policy (CPP) AYT answer Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Client Smartcard Support Internet

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Linux and Solaris Software Clients Cisco VPN Solaris and Linux client Linux VPN client Solaris VPN client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Mac OS X Software Client Cisco VPN Mac OS X Client

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3002 Hardware Client VPN 3002 VPN E Private Public Console Hardware reset Power Private Public Console Hardware reset Power

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Versus Software Client Software client Used by a road warrior Loaded on the individuals PC Only supports an individuals device The tunnel is launched by a user. Hardware client Small office or home office Built into hardware, (the end-user does not have to touch a PC) Supports multiple devices behind the hardware client The hardware client launches a tunnel automatically. SOHO

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Certicom VPN Client Support VPN 3000 Certicom IPSec VPN Client Internet Corporate network Tunnel

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuration Options Welcome to Cisco Systems VPN 3000 Concentrator Series Command Line Interface 1) Configuration 2) Administration 3) Monitoring 4) Save changes to Config file 5) Help Information

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Management Solutions

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

© 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary There are five models in the Cisco VPN 3000 Concentrator Series: 3005, 3015, 3030, 3060, and The Cisco VPN 3000 Concentrator Series features include a scaleable encryption processor, strong encryption algorithms, broad client support, and broad access method support.