CCNP Security VPN FAQ: Configuring Cisco VPN 3000 for Remote Access Using Preshared Keys Question. What methods can you use for user authentication on the Cisco VPN 3000 Series Concentrators? Answer: You can configure the VPN concentrators to use RADIUS, NT Domain, Security Dynamics International (SDI), and internal user authentication. Question. What methods can you use … [Read more...]
CCNP Security VPN FAQ: Cisco VPN 3000 LAN-to-LAN with Preshared Keys
CCNP Security VPN FAQ: Cisco VPN 3000 LAN-to-LAN with Preshared Keys Q1. What is a LAN-to-LAN connection? Answer: A LAN-to-LAN connection is a secure connection between two LANs. Q2. What equipment is required for a LAN-to-LAN connection? Answer: A LAN-to-LAN connection requires any combination of concentrators, routers and firewalls. Q3. Where can a LAN-to-LAN … [Read more...]
CCNP Security VPN FAQ: Configuring Scalability Features of the VPN 3002 Hardware Client
CCNP Security VPN FAQ: Configuring Scalability Features of the VPN 3002 Hardware Client Q1. What are the ramifications an administrator should consider when planning to use Virtual Router Redundancy Protocol (VRRP) along with reverse route injection (RRI)? Answer: VRRP (Virtual Router Redundancy Protocol) and RRI (Reverse Route Injection) are incompatible and should not be … [Read more...]
CCNP Security VPN FAQ: Cisco VPN 3000 Concentrator Series Hardware Overview
CCNP Security VPN FAQ: Cisco VPN 3000 Concentrator Series Hardware Overview Question. What models are available in the Cisco VPN 3000 Concentrator Series? Answer: Five models are available in the Cisco VPN 3000 Concentrator Series: VPN 3005, VPN 3015, VPN 3030, VPN 3060, and VPN 3080. Question. What is the maximum number of simultaneous sessions that can be supported on … [Read more...]
CCNP Security VPN FAQ: Configuring Cisco 3002 Hardware Client for Remote Access
CCNP Security VPN FAQ: Configuring Cisco 3002 Hardware Client for Remote Access Q1. What screen is used on the head-end concentrator to demand the use of preshared keys? Answer: The Configuration | System | Tunneling Protocols | IPSec LAN-to-LAN | Modify screen is used to demand preshared keys from a VPN 3000 Series Concentrator. Q2. You need to allow the main office to … [Read more...]
CCNP Security VPN FAQ: Overview of VPN and IPSec Technologies
CCNP Security VPN FAQ: Overview of VPN and IPSec Technologies Question. Which Cisco hardware product families support IPSec VPN technology? Answer: Cisco IOS routers, PIX Firewalls, and VPN 3000 Series Concentrators, including the VPN 3002 Hardware Client, support IPSec VPN technology Question. What are the two IPSec protocols? Answer: The two IPSec protocols are … [Read more...]
CCNP Security VPN FAQ: Monitoring and Administering the VPN 3000 Series Concentrator
CCNP Security VPN FAQ: Monitoring and Administering the VPN 3000 Series Concentrator Q1. What screen is used to set the password for the administrator? Answer: Administration | Access Rights | Administrators Q2. You wish to limit HTTP access to the concentrator to hosts on the same subnet as the inside interface of the concentrator. What is the format of the Access Control … [Read more...]
CCNP Security VPN FAQ: Configuring the Cisco VPN Client Firewall Feature
CCNP Security VPN FAQ: Configuring the Cisco VPN Client Firewall Feature Q1. You have a number of clients running Windows 98 and a remote VPN 3002 Hardware Client assigned to the same group. Your supervisor wants you to force everyone on this group connecting to have a firewall running on his or her machine. Can you do this? Answer: No. The Firewall Required option cannot be … [Read more...]
CCNP Security VPN FAQ: Configuring Cisco VPN 3000 for Remote Access Using Digital Certificates
CCNP Security VPN FAQ: Configuring Cisco VPN 3000 for Remote Access Using Digital Certificates Q1. What Public Key Cryptography Standard (PKCS) is used to enroll with a CA? Answer: PKCS #10 is the standard form generally used to request certificate enrollment with a CA. Q2. What field in the certificate request should match the IPSec group name on the VPN … [Read more...]