© 2003, Cisco Systems, Inc. All rights reserved. CSVPN 4.04-1 Lesson 4 Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview. - презентация

1 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Lesson 4 Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview

2 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Objectives Upon completion of this lesson, you will be able to perform the following tasks: Describe the Cisco VPN 3000 Concentrator Series. Identify the Cisco VPN 3000 Concentrator Series models. Describe the Cisco VPN 3000 Concentrator Series features and functions.

3 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Overview

4 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Concentrator Series VPN 3030 regional office VPN 3060 or 3080 central site VPN 3030 regional office VPN 3005 or 3015 branch office Internet

5 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Product Hardware Portfolio BranchRegionalCentral site ,000 Cisco VPN 3000 Concentrator Series The goal is to provide products that cover the entire spectrum of customer VPN applications, making Cisco the only choice for CPE and service providers of all sizes , ,500

6 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Models

7 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3005 Concentrator 100–240V power supply PublicPrivate

8 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Private V power supplies load sharing Public External Cisco VPN 3015 Concentrator 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

9 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3030 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

10 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3060 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module Slots

11 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3080 Concentrator Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots

12 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Front LEDs

13 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Front LEDs (cont.)

14 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Rear LEDs

15 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Back Panel Private V power supplies load sharing Public External 100–240V power supplies load sharing Private Public External SEP/SEP-E module slots Console

16 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Product Comparison

17 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Benefits and Features

18 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN POWER STATUS SEP-200U SEP/SEP-E DSP-based hardware encryption1,500 to 5,000 simultaneous sessions SEPProvides DES and 3DES hardware-based encryption SEP-EProvides DES, 3DES, and AES hardware-based encryption

19 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN SEP/SEP-E Redundancy Redundancy Top-to-bottom Side-to-side SEP/SEP-E redundancy Failover SEP/SEP-E redundancy

20 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Redundancy VRRP Internet Server Private network Public network Master Slave

21 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Concentrator Backup LAN-to-LAN Central SiteRemote Site

22 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Load Balancing Server Internet Private network Public network Master Non-master

23 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client Support

24 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Client Support Clients Windows Linux Solaris Mac Certicom Secure VPN session Corporate office Web server File server Internet Access Analog ISDN DSL Cable Wireless Tunneling protocols IPSec L2TP over IPSec PPTP L2TP

25 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Software Client Cisco VPN Windows Client

26 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Client Firewall Features AYT Yes Are You There (AYT)? Push CPP Centralized Protection Policy (CPP) AYT answer Internet

27 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Windows Client Smartcard Support Internet

28 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Linux and Solaris Software Clients Cisco VPN Solaris and Linux client Linux VPN client Solaris VPN client

29 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN Mac OS X Software Client Cisco VPN Mac OS X Client

30 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Cisco VPN 3002 Hardware Client VPN 3002 VPN E Private Public Console Hardware reset Power Private Public Console Hardware reset Power

31 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Hardware Versus Software Client Software client Used by a road warrior Loaded on the individuals PC Only supports an individuals device The tunnel is launched by a user. Hardware client Small office or home office Built into hardware, (the end-user does not have to touch a PC) Supports multiple devices behind the hardware client The hardware client launches a tunnel automatically. SOHO

32 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Certicom VPN Client Support VPN 3000 Certicom IPSec VPN Client Internet Corporate network Tunnel

33 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Configuration Options Welcome to Cisco Systems VPN 3000 Concentrator Series Command Line Interface 1) Configuration 2) Administration 3) Monitoring 4) Save changes to Config file 5) Help Information

34 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Network Management Solutions

35 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary

36 © 2003, Cisco Systems, Inc. All rights reserved. CSVPN Summary There are five models in the Cisco VPN 3000 Concentrator Series: 3005, 3015, 3030, 3060, and The Cisco VPN 3000 Concentrator Series features include a scaleable encryption processor, strong encryption algorithms, broad client support, and broad access method support.