© 2003, Cisco Systems, Inc. All rights reserved. CSVPN 4.012-1 Lesson 12 Configure the Cisco Virtual Private Network Client Backup Server, and Load Balancing. - презентация

1 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 12 Configure the Cisco Virtual Private Network Client Backup Server, and Load Balancing

2 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon the completion of this lesson, you will be able to perform the following tasks: Describe the Cisco VPN Client reverse route injection, backup server, and load-balancing features. Configure the VPN Client for a backup server. Configure the Cisco VPN Client for load balancing. Configure the Concentrator for reverse route injection.

3 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Cisco VPN Client Backup Server Feature

4 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup Server Primary server Backup server SOHO X Internet

5 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerConcentrator Configuration SOHO X Internet Drop-down menu choices: Use Client Configured List Disable and Clear Configured List Use List Below

6 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerHardware Client Configuration SOHO X Internet

7 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Backup ServerSoftware Client Configuration X Internet

8 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuring the Cisco VPN Client Load-Balancing Feature

9 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load-Balancing Cluster VPN virtual cluster IP address SOHO Internet Master Secondary

10 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN SOHO Load-Balancing Connection Process VPN virtual cluster IP address SOHO Internet Secondary Master

11 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN VCA messages SOHO Internet Secondary Master Secondary

12 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load-Balancing Configuration Process

13 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Add Rules to Filter SOHO Internet Master Secondary

14 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Load-Balancing Configuration SOHO Internet Virtual IP address Secondary Master Secondary

15 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client Load-Balancing Configuration SOHO Secondary Master Secondary Virtual address Internet

16 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Client System Status SOHO Secondary Master Secondary Internet

17 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN VPN Software Client Load-Balancing Configuration Secondary Master Secondary Virtual address Internet

18 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview of the Cisco VPN Client Reverse Route Injection Feature

19 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN VPN Client route is advertised out which Concentrator? Advertising VPN Client Routes SOHO Internet SOHO Secondary Master

20 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN RRI Feature The following are the VPN Client RRI features: Client RRI Network extension RRI Advertise host route Tunnel established SOHO Internet

21 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client RRI Client mode Advertise host route Tunnel established Internet

22 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client RRIRouting Table No tunnel Tunnel established Cisco VPN 3002 Client mode Internet Tunnel establishedAdvertise

23 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Extension RRI Cisco VPN 3002 Network Extension mode Internet Tunnel establishedAdvertise host routes

24 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Extension RRIRouting Table No tunnel Tunnel established Cisco VPN 3002 Network Extension mode Internet Tunnel established Advertise

25 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

26 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary The Concentrator can be configured to advertise routes as VPN Clients connect. The VPN Client can be configured to connect to a backup Concentrator if the primary Concentrator is unavailable. The Concentrators can be configured for load balancing to spread the connection load between co-located Concentrators.

27 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Exercise

28 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lab Visual Objective P.0 Student PP P.0 RTS VPN 3000 Web FTP.10.1PP PP.0