Cisco VPN 3000

To Next Page

To Previous Page

Configuration | Policy Management | Traffic Management | Rules | Add, Modify, or Copy

13-13

VPN 3000 Concentrator Series User Guide

Figure 13-8: Configuration | Policy Management | Traffic Management | Rules | Add, Modify, or

Copy screen

Main Page

Default Chapter3
- Table of Contents3
About this Manual37
- Prerequisites37
Organization37
Additional Documentation38
- Other References39
Documentation Conventions39
Data Formats40
- IP Addresses40
- Subnet Masks and Wildcard Masks40
- MAC Addresses40
- Hostnames40
- Text Strings40
- Filenames40
- Port Numbers40
Contacting Cisco with Questions41
Using the VPN 3000 Concentrator Series Manager43
Browser Requirements43
- Javascript43
- Cookies44
- Navigation Toolbar44
Recommended PC Monitor / Display Settings44
Connecting to the VPN Concentrator Using HTTP45
Installing the SSL Certificate in Your Browser45
- Installing the SSL Certificate with Internet Explorer46
  - Viewing Certificates with Internet Explorer51
- Installing the SSL Certificate with Netscape52
Connecting to the VPN Concentrator Using HTTPS59
Logging in the VPN Concentrator Manager60
Configuring HTTP, HTTPS, and SSL Parameters61
Understanding the VPN Concentrator Manager Window61
- Title Bar61
- Status Bar61
- Mouse Pointer and Tips62
- Top Frame (Manager Toolbar)62
- Save63
Organization of the VPN Concentrator Manager65
Navigating the VPN Concentrator Manager66
Configuration67
Interfaces69
Configuration | Interfaces70
- Interface71
  - Ethernet 1 (Private), Ethernet 2 (Public), Ethernet 3 (External)72
  - WAN Interface in Slot N, Port a B72
- IP Address72
- Status72
- Subnet Mask72
Configuration | Interfaces | Power73
- Ethernet 1 (Private), Ethernet 2 (Public), Ethernet 3 (External) Module in Back-Panel Image73
- Power Supplies73
- WAN Card Slot N Module in Back-Panel Image73
- Alarm Thresholds74
- Board74
Cpu74
- Power Supply A, B74
- Apply / Cancel75
Configuration | Interfaces | Ethernet 1 2 375
- Using the Tabs75
- General Parameters Tab76
- RIP Parameters Tab78
  - Inbound RIP78
  - Outbound RIP78
- OSPF Parameters Tab79
- Apply / Cancel81
Configuration | Interfaces | WAN Card in Slot N82
- Interface82
- Status82
Configuration | Interfaces | WAN Card in Slot N | Port a B | Select T1/E183
- IP Address83
- Subnet Mask83
- T1: up to 24 64-Kbps Channels83
Configuration | Interfaces | WAN Card in Slot N | Port a B as T1 or E184
- E1: up to 31 64-Kbps Channels84
- Using the Tabs84
- IP Parameters Tab85
- Filter86
- RIP Parameters Tab86
  - Inbound RIP87
  - Outbound RIP87
- OSPF Parameters Tab88
- WAN Parameters Tab91
- Apply / Cancel93
- PPP Multilink Parameters Tab93
  - Enable PPP Multilink93
System Configuration95
Configuration | System95
Configuration | System | Servers97
- Servers97
Configuration | System | Servers | Authentication98
- Add / Modify / Delete / Move / Test99
- Authentication Servers99
Configuration | System | Servers | Authentication | Add or Modify99
- Server Type = RADIUS100
- Server Type = NT Domain101
- Server Type = SDI102
Configuration | System | Servers | Authentication | Delete104
- Server Type = Internal Server104
  - Add / Cancel104
Configuration | System | Servers | Authentication | Test105
- OK / Cancel105
- Password105
- User Name105
- Yes / no105
- Authentication Server Test: Authentication Error106
- Authentication Server Test: Authentication Rejected Error106
- Authentication Server Test: Success106
- Continue106
Configuration | System | Servers | Accounting107
- Accounting Servers108
- Add / Modify / Delete / Move108
- Table 5-1: RADIUS Accounting Record Attributes108
- Accounting Server109
Configuration | System | Servers | Accounting | Add or Modify109
- Server Port109
- Timeout109
- Add or Apply / Cancel110
Verify110
- Domain111
- Enabled111
- Primary DNS Server111
- Secondary DNS Server111
- Tertiary DNS Server111
- Apply / Cancel112
Configuration | System | Servers | DNS110
- Retries110
- Server Secret110
Configuration | System | Servers | DHCP112
- Timeout Period112
- Timeout Retries112
- Add / Modify / Delete / Move113
- DHCP Servers113
- Add or Apply / Cancel114
Configuration | System | Servers | DHCP | Add or Modify114
Configuration | System | Servers | NTP114
- DHCP Server114
- Server Port114
- Apply / Cancel115
Configuration | System | Servers | NTP | Parameters115
- Sync Frequency115
- Add / Modify / Delete116
Configuration | System | Servers | NTP | Hosts116
- NTP Hosts116
- Add or Apply / Cancel117
Configuration | System | Servers | NTP | Hosts | Add or Modify117
- NTP Host117
Address Management119
Configuration | System | Address Management119
Configuration | System | Address Management | Assignment120
- Use Address from Authentication Server120
- Use Client Address120
- Use DHCP120
- Apply / Cancel121
Configuration | System | Address Management | Pools121
- IP Pool Entry121
- Use Address Pools121
- Add / Modify / Delete122
Configuration | System | Address Management | Pools | Add or Modify122
- Range End122
- Range Start122
- Add or Apply / Cancel123
Tunneling Protocols125
Configuration | System | Tunneling Protocols126
Configuration | System | Tunneling Protocols | PPTP126
- Enabled127
- Maximum Tunnel Idle Time127
- Acknowledgement Delay128
- Acknowledgement Timeout128
- Limit Transmit to Window128
- Max. Sessions/Tunnel128
- Max. Tunnels128
- Packet Processing Delay128
- Packet Window Size128
- Apply / Cancel129
Configuration | System | Tunneling Protocols | L2TP129
- Control Retransmit Interval130
- Control Retransmit Limit130
- Control Window Size130
- Enabled130
- Max. Sessions/Tunnel130
- Max. Tunnels130
- Maximum Tunnel Idle Time130
- Apply / Cancel131
Configuration | System | Tunneling Protocols | Ipsec131
- Hello Interval131
Configuration | System | Tunneling Protocols | Ipsec LAN-To-LAN132
- Add / Modify / Delete133
- LAN-To-LAN Connection133
Configuration | System | Tunneling Protocols | Ipsec LAN-To-LAN | no Public Interfaces134
- Interface136
Configuration | System | Tunneling Protocols | Ipsec LAN-To-LAN | Add or Modify134
Name136
Peer136
- Authentication137
- Digital Certificate137
- Encryption137
- Preshared Key137
- IKE Proposal138
- Local Network138
- Network Autodiscovery138
- Remote Network139
  - Network List139
  - Wildcard Mask140
- Add or Apply / Cancel140
Configuration | System | Tunneling Protocols | Ipsec LAN-To-LAN | Add140
Local or Remote Network List140
- List Name141
- Network List141
- Add142
Configuration | System | Tunneling Protocols | Ipsec LAN-To-LAN | Add | Done142
- Generate Local List142
Configuration | System | Tunneling Protocols | Ipsec | IKE Proposals143
- Table 7-1: Cisco-Supplied Default IKE Proposals144
- Activate145
- Active Proposals145
- Add145
- Deactivate145
- Inactive Proposals145
- Move up / Move down145
Modify146
- Authentication Mode147
- Proposal Name147
- Authentication Algorithm148
- Diffie-Hellman Group148
- Encryption Algorithm148
- Lifetime Measurement148
- Add or Apply / Cancel149
- Data Lifetime149
- Time Lifetime149
Copy146
Delete146
Configuration | System | Tunneling Protocols | Ipsec | IKE Proposals | Add, Modify, or Copy146
IP Routing151
Configuration | System | IP Routing152
Configuration | System | IP Routing | Static Routes152
- Add / Modify / Delete153
Configuration | System | IP Routing | Static Routes | Add or Modify153
- Static Routes153
- Add or Apply / Cancel154
- Destination154
  - Router Address154
  - Interface154
- Metric154
- Network Address154
- Subnet Mask154
Configuration | System | IP Routing | Default Gateways155
- Default Gateway155
- Metric155
- Apply / Cancel156
Configuration | System | IP Routing | OSPF156
- Override Default Gateway156
- Tunnel Default Gateway156
- Autonomous System157
- Enabled157
- Router ID157
- Add / Modify / Delete158
- Apply / Cancel158
Configuration | System | IP Routing | OSPF Areas158
- OSPF Area158
- Area ID159
- Area Summary159
Configuration | System | IP Routing | OSPF Areas | Add or Modify159
- Add or Apply / Cancel160
Configuration | System | IP Routing | DHCP160
- Enabled160
- External LSA Import160
- Apply / Cancel161
- Lease Timeout161
- Listen Port161
- Timeout Period161
Configuration | System | IP Routing | Redundancy162
- Advertisement Interval163
- Enable VRRP163
- Group ID163
- Group Password163
- Group Shared Addresses163
- Private)163
Role163
- Apply / Cancel164
- External)164
- Public)164
Management Protocols165
- Apply / Cancel166
Configuration | System | Management Protocols165
Configuration | System | Management Protocols | FTP166
- Enable166
- Maximum Connections166
- Port166
Configuration | System | Management Protocols | HTTP/HTTPS167
- Enable HTTP167
- Apply / Cancel168
Configuration | System | Management Protocols | TFTP168
- Enable HTTPS168
- HTTP Port168
- HTTPS Port168
- Maximum Sessions168
- Apply / Cancel169
- Enable169
- Maximum Connections169
- Port169
- Timeout169
Configuration | System | Management Protocols | Telnet170
- Enable Telnet170
- Enable Telnet/Ssl170
- Telnet Port170
- Apply / Cancel171
Configuration | System | Management Protocols | SNMP171
- Maximum Connections171
- Telnet/Ssl Port171
- Apply / Cancel172
Configuration | System | Management Protocols | SNMP Communities172
- Enable172
- Maximum Queued Requests172
- Port172
- Add / Modify / Delete173
- Community Strings173
- Add or Apply / Cancel174
- Community String174
Configuration | System | Management Protocols | SNMP Communities | Add or Modify174
Configuration | System | Management Protocols | SSL174
- Client Authentication176
- Encryption Protocols176
- SSL Version176
- Apply / Cancel177
- Generated Certificate Key Size177
Events179
- Table 10-1: VPN Concentrator Event Classes179
Event Class179
Event Severity Level182
- Table 10-2: VPN Concentrator Event Severity Levels182
Event Log183
- Event Log Data183
Configuration | System | Events183
Configuration | System | Events | General184
- Save Log on Wrap184
- Email Source Address185
- FTP Saved Log on Wrap185
- Save Log Format185
- Severity to Log185
- Syslog Format185
- Severity to Console186
- Severity to Email186
- Severity to Syslog186
- Severity to Trap186
- Table 10-3: Configuring "Well-Known" SNMP Traps186
- Apply / Cancel187
Configuration | System | Events | FTP Backup187
- FTP Directory187
- FTP Password187
- FTP Server187
- FTP Username187
- Apply / Cancel188
Configuration | System | Events | Classes188
- Configured Event Classes188
- Verify188
- Add / Modify / Delete189
Configuration | System | Events | Classes | Add or Modify189
- Class Name190
Enable190
- Severity to Console190
- Severity to Log190
- Severity to Syslog190
- Add or Apply / Cancel191
- Severity to Email191
- Severity to Trap191
- Add / Modify / Delete192
Configuration | System | Events | Trap Destinations192
- Trap Destinations192
- Community193
Configuration | System | Events | Trap Destinations | Add or Modify193
- Destination193
- SNMP Version193
- Add or Apply / Cancel194
Configuration | System | Events | Syslog Servers194
- Port194
- Add / Modify / Delete195
Configuration | System | Events | Syslog Servers | Add or Modify195
- Syslog Server195
- Syslog Servers195
- Add or Apply / Cancel196
Configuration | System | Events | SMTP Servers196
- Facility196
- Port196
- Add / Modify / Delete / Move197
- SMTP Servers197
- Add or Apply / Cancel198
Configuration | System | Events | SMTP Servers | Add or Modify198
- SMTP Server198
- Add / Modify / Delete199
- Email Recipients199
Configuration | System | Events | Email Recipients198
Configuration | System | Events | Email Recipients | Add or Modify200
- Email Address200
- Max Severity200
- Add or Apply / Cancel201
Configuration | System | General203
- General203
- Apply / Cancel204
Configuration | System | General | Identification204
- Contact204
- Location204
- System Name204
- Apply / Cancel205
Configuration | System | General | Time and Date205
- Current Time205
- Enable DST Support205
- New Time205
User Management207
Configuration | User Management209
Configuration | User Management | Base Group209
- Using the Tabs209
- General Parameters Tab210
- Ipsec Parameters Tab213
- Banner215
Configuration | User Management | Groups222
- Current Groups222
- Add / Modify / Delete223
Configuration | User Management | Groups | Add or Modify (Internal)224
- Identity Parameters Tab224
  - Group Name225
- Password225
- Filter228
- Ipsec SA231
- Banner233
Configuration | User Management | Users240
- Add / Modify / Delete240
- Configuration | User Management | Users | Add or Modify240
- Current Users240
- Value / Inherit?245
  - Store Password on Client246
    - Ipsec SA246
    - PPTP/L2TP Parameters Tab247
- Value / Inherit?247
Configuration | Policy Management | Access Hours252
- Add / Modify / Delete253
- Current Access Hours253
Configuration | Policy Management252
Configuration | Policy Management | Access Hours | Add or Modify254
- Name254
- Sunday - Saturday254
- Add or Apply / Cancel255
Configuration | Policy Management | Traffic Management255
- Add / Modify / Copy / Delete256
Configuration | Policy Management | Traffic Management | Network Lists256
- Network List256
- Configuration | Policy Management | Traffic Management | Network Lists | Add, Modify, or Copy257
- Add or Apply / Cancel258
- Generate Local List258
- List Name258
- Network List258
Configuration | Policy Management | Traffic Management | Rules259
- Filter Rules259
- Table 13-1: Cisco-Supplied Default Filter Rules260
- Add / Modify / Copy / Delete261
Rule Name264
- Network List265
- Source Address265
- TCP Connection265
- TCP/UDP Source Port266
- Wildcard-Mask266
  - Port or Range267
  - Add or Apply / Cancel268
- ICMP Packet Type268
- Port or Range268
- TCP/UDP Destination Port268
- Configuration | Policy Management | Traffic Management | Rules | Delete269
Configuration | Policy Management | Traffic Management | Security Associations269
- Add / Modify / Delete271
- Ipsec Sas271
- Table 13-2: Cisco-Supplied Default Security Associations271
Configuration | Policy Management | Traffic Management | Security Associations | Add or Modify272
- Inheritance273
- Authentication Algorithm274
- Encapsulation Mode274
- Perfect Forward Secrecy275
  - Time Lifetime275
  - Digital Certificate276
- IKE Parameters276
- IKE Peer276
- Negotiation Mode276
- Add Filter280
- Assign Rules to Filter280
- Default Action282
  - Filter Name282
  - Add or Apply / Cancel283
- Description283
- Fragments283
- Source Routing283
  - Configuration | Policy Management | Traffic Management | Assign Rules to Filter284
  - Filter Name:284
- Available Rules285
- Current Rules in Filter285
  - Insert above285
  - Remove285
- Assign SA to Rule286
- Configuration | Policy Management | Traffic Management | Assign Rules to Filter | Add SA to Rule286
Done286
- Move up / Move down286
- Add SA to Rule on Filter:287
- Apply287
  - Ipsec Sas287
  - Apply / Cancel288
- Change SA on Rule in Filter:288
- Ipsec Sas288
Configuration | Policy Management | Traffic Management | NAT289
- Apply / Cancel290
Configuration | Policy Management | Traffic Management | NAT | Enable290
Configuration | Policy Management | Traffic Management | NAT | Rules290
- Enabled290
- Add / Modify / Delete291
- NAT Rules291
Configuration | Policy Management | Traffic Management | NAT | Rules | no Public Interfaces292
- Interface293
- IP Address293
- Private Address293
Configuration | Policy Management | Traffic Management | NAT | Rules | Add or Modify292
Administration295
Administration | Sessions297
- Refresh297
- Active LAN-To-LAN Sessions298
- Active Management Sessions298
- Active Remote Access Sessions298
- Logout All: PPTP | L2TP | Ipsec User | L2Tp/Ipsec | Ipsec/Nat | Ipsec/Lan-To-LAN298
- Table 14-1: Parameter Definitions for Administration | Sessions Screen301
Administration | Sessions | Detail302
- Administration | Sessions | Detail Parameters306
  - Back to Sessions306
  - Refresh306
- Table 14-2: Parameter Definitions for Administration | Sessions | Detail Screens306
Administration | Software Update308
- Current Software Revision308
Browse309
- Software Update Progress309
- Upload309
- Software Update Error310
- Software Update Success310
Administration | System Reboot311
- Action312
- Apply / Cancel312
- Configuration312
- When to Reboot/Shutdown312
- Address/Hostname to Ping313
Administration | Ping313
- Continue313
- Ping / Cancel313
- Success (Ping)313
Administration | Monitoring Refresh314
- Enable314
- Error (Ping)314
- Refresh Period314
Administration | Access Rights315
Administration | Access Rights | Administrators315
- Apply / Cancel315
- Group Number316
- Properties / Modify316
- Username316
Administration | Access Rights | Administrators | Modify Properties317
- Administrator317
- Apply / Cancel317
- Enabled317
- Access Rights318
- Password318
- Verify318
General319
- Snmp319
- Add / Modify / Delete / Move320
Files319
Administration | Access Rights | Access Control List320
- Manager Workstations320
Administration | Access Rights | Access Control List | Add or Modify321
- IP Address321
- Priority (Modify Screen Only)321
- Access Group322
- Add or Apply / Cancel322
Administration | Access Rights | Access Settings322
- Session Idle Timeout322
Administration | File Management323
- Apply / Cancel323
- Encrypt Config File323
- Session Limit323
Administration | File Management | Files324
- Date/Time324
- Filename324
- Refresh324
- Size (Bytes)324
- Total, Used, Free KB324
- Actions325
  - View (Save)325
    - Delete325
    - Copy325
Administration | File Management | TFTP Transfer326
- OK / Cancel326
- Action327
- Concentrator File327
- OK / Cancel327
- TFTP Server327
- TFTP Server File327
Administration | File Management | Swap Configuration Files326
Administration | Certificate Management328
- Error (TFTP)328
- Success (TFTP)328
  - Continue328
Administration | Certificate Management | Enrollment330
- Installing Digital Certificates on the VPN Concentrator330
- Common Name (CN)331
- Organizational Unit (OU)331
- Apply / Cancel332
Country (C)332
Key Size332
- Locality (L)332
- State/Province (SP)332
- Subject Alternative Name (Fully Qualified Domain Name)332
Administration | Certificate Management | Enrollment | Request Generated333
Administration | Certificate Management | Installation334
- Enrolling with a Certificate Authority334
- Certificate Password335
- Certificate Type335
- Verify335
Administration | Certificate Management | Certificates336
- Apply / Cancel336
- Certificate Authorities336
- Identity Certificates336
- Local File / Browse336
- Actions / View / CRL / Delete337
- Expiration337
- SSL Certificate / [ Generate ]337
- Subject / Issuer337
Administration | Certificate Management | Certificates | View338
Subject338
- Certificate Usage339
- Public Key Type339
- Serial Number339
- Signing Algorithm339
  - Administration | Certificate Management | Certificates | CRL340
  - Back340
- CRL Distribution Point340
- MD5 Thumbprint340
- SHA1 Thumbprint340
- Subject Alternative Name (Fully Qualified Domain Name)340
Issuer338
Validity340
- Certificate341
- Enable CRL Checking341
Server341
- Password342
- Apply / Cancel342
- Filter342
- Server Port342
- Update Period342
Login DN342
Monitor | Routing Table346
- Refresh346
- Address347
- Interface347
Mask347
- Next Hop347
- Protocol347
- Valid Routes347
- Metric348
Monitor | Event Log348
- Client IP Address349
- Direction349
- Event Class349
- Events/Page349
- Select Filter Options349
- Severities349
- First Page350
- Last Page350
- Next Page350
- Previous Page350
- Save Log350
- Clear Log351
- Event Log Format351
Monitor | System Status353
- Back Panel354
- Bootcode Rev354
- Front Panel354
RAM Size354
- Refresh354
- Software Rev354
- Up Since354
- VPN Concentrator Type354
- Active Sessions355
- CPU Utilization355
CPU, Cage355
- Throughput355
Monitor | System Status | Ethernet Interface356
- Refresh356
- Status356
- Rx Broadcast357
- Rx Multicast357
- Rx Unicast357
- Tx Broadcast357
- Tx Multicast357
- Tx Unicast357
- Back358
Back356
- IP Address356
Monitor | System Status | Dual T1/E1 WAN Slot N358
- Refresh358
- T1/E1 Statistics358
- Synchronous Statistics360
Monitor | Statistics | MIB-II | IP361
- Slot361
- Port361
- Ifindex361
Monitor | System Status | Power363
- Refresh363
  - Back363
    - Power Supply A, B363
    - Board364
Monitor | System Status | SEP364
- SEP Redundancy364
- V Status, 3.3V Status, 5V Status364
Back365
- Refresh365
- Decrypted: Octets / Packets366
- DSP Code Version366
  - Status366
- Encrypted: Octets / Packets366
- Hash Encrypted: Packets366
- Inbound Hash: Octets / Packets366
- Outbound Hash: Octets / Packets366
- DH Derived Secret Keys367
- DH Keys Generated367
- Drops: Packets367
- Hash Decrypted: Packets367
- Random Bytes Available367
- Random Cache Empty367
- Random Replenishments367
- Random Requests367
- DSA Digital Keys Generated368
- DSA Digital Signings368
- DSA Digital Verifications368
- RSA Decryptions: Octets / Packets368
- RSA Digital Signings368
- RSA Digital Verifications368
- RSA Encryptions: Octets / Packets368
- LED Selector Button]369
Monitor | System Status | LED Status369
- Refresh369
Monitor | Statistics | MIB-II | ARP Table370
Monitor | Sessions370
- Refresh370
- Session Summary Table370
- LAN-To-LAN Sessions Table371
- IP Address372
- Remote Access Sessions Table372
- Management Sessions Table373
Monitor | Sessions | Detail374
- Back to Sessions378
- Monitor | Sessions | Detail Parameters378
- Refresh378
- Table 15-2: Parameter Definitions for Monitor | Sessions | Detail Screens378
- Active Sessions380
Monitor | Sessions | Protocols380
- Refresh380
- Total Sessions380
  - Protocol380
- Bar Graph381
- Percentage381
- Sessions381
- Active Sessions382
Monitor | Sessions | Seps382
- Refresh382
- Total Sessions382
  - Active Sessions383
  - Bar Graph383
Monitor | Sessions | Encryption383
- Percentage383
- Refresh383
- Total Sessions383
Bar Graph384
- Encryption384
- Percentage384
- Sessions384
Monitor | Sessions | Top Ten Lists | Data385
- Refresh385
Monitor | Sessions | Top Ten Lists385
- Username385
- IP Address386
- Login Time387
  - Monitor | Sessions | Top Ten Lists | Duration387
  - Refresh387
- Total Bytes387
  - Username387
  - Encryption388
- Login Time388
- Protocol388
Duration389
- IP Address389
Monitor | Sessions | Top Ten Lists | Throughput389
- Protocol389
- Refresh389
- Username389
- Avg. Throughput (Bytes/Sec)390
- Encryption390
- Login Time390
Monitor | Statistics391
- Active Tunnels392
- Maximum Tunnels392
Monitor | Statistics | PPTP392
- Refresh392
- Total Tunnels392
- Active Sessions393
- Maximum Sessions393
- PPTP Sessions393
  - Receive Octets394
- Rx Discards Control / Data393
- Tx Octets Control / Data393
- Tx Packets Control / Data393
- Username394
Monitor | Statistics | L2TP395
- Refresh395
- Active Sessions396
- Active Tunnels396
- Failed Sessions396
- Failed Tunnels396
- Maximum Sessions396
- Maximum Tunnels396
- Rx Octets Control / Data396
- Total Sessions396
- Total Tunnels396
- L2TP Sessions397
  - Remote IP397
- Rx Discards Control / Data397
- Rx Packets Control / Data397
  - Tx Octets Control / Data397
  - Tx Packets Control / Data397
- Username397
- Flow395
- Serial397
Monitor | Statistics | Ipsec399
- Refresh399
- IKE (Phase 1) Statistics400
- Active Tunnels403
- Ipsec (Phase 2) Statistics403
- Total Tunnels403
Monitor | Statistics | HTTP405
- Octets Received405
- Octets Sent405
- Active Connections406
- Max Connections406
- Monitor | Statistics | Events406
- Packets Received406
- Packets Sent406
Monitor | Statistics | Events407
- Count of Events407
- Event Class407
- Event Number407
Monitor | Statistics | Telnet407
- Refresh407
- Active Sessions408
- Attempted Sessions408
- Successful Sessions408
- Telnet Sessions408
Timeouts409
Requests409
- Responses409
- Server Unreachable409
Monitor | Statistics | DNS409
- Other Failures409
- Refresh409
Monitor | Statistics | Accounting410
Accepts410
- Monitor | Statistics | Authentication410
- Refresh410
- Requests410
- Retransmissions410
- Server IP Address:port410
- Bad Authenticators411
- Challenges411
- Malformed Responses411
- Pending Requests411
Rejects411
Timeouts411
- Unknown Type411
Monitor | Statistics | Authentication412
- Malformed Responses412
  - Monitor | Statistics | Accounting412
  - Refresh412
Requests412
- Responses412
- Retransmissions412
- Server IP Address:port412
- Bad Authenticators413
Timeouts413
- Unknown Type413
- Inbound Packets Filtered414
- Inbound Packets Post Filter414
- Inbound Packets Pre-Filter414
- Interface414
- Outbound Packets Filtered414
- Outbound Packets Post Filter414
- Outbound Packets Pre-Filter414
- Checksum Errors415
Monitor | Statistics | Filtering413
- Pending Requests413
- Refresh413
Monitor | Statistics | VRRP415
- Refresh415
- Version Errors415
- Advertisement Interval Errors416
- Advertisements Received416
- Authentication Failures416
- Became Master416
  - Interface: 1 (Private), 2 (Public), 3 (External)416
  - Status416
- Virtual Routers416
  - VRID Errors416
  - Address List Errors417
- Invalid Authentication Errors417
- Invalid Type Received417
- Mismatch Authentication Errors417
- Packet Length Errors417
- Priority 0 Packets Received417
- Priority 0 Packets Sent417
- Time-To-Live Errors417
  - Monitor | Statistics | SSL418
  - Refresh418
Monitor | Statistics | SSL418
- Total Sessions418
- Unencrypted Inbound Octets418
- Unencrypted Outbound Octets418
Monitor | Statistics | DHCP419
- Lease Duration419
- Leased IP Address419
- Max Active Sessions419
- Refresh419
- Time Used419
- Allocated Addresses420
- Available Addresses420
- DHCP Server Address420
- IP Address Range: Start / End420
Monitor | Statistics | Address Pools420
- Refresh420
- Time Left420
- Total Addresses420
- Max Allocated Addresses421
Monitor | Statistics | MIB-II421
- Interface422
Monitor | Statistics | MIB-II | Interfaces422
- Refresh422
- Status422
- Broadcast in423
- Broadcast out423
- Multicast in423
- Multicast out423
- Unicast in423
- Unicast out423
Monitor | Statistics | MIB-II | TCP/UDP424
- Refresh424
- TCP Segments Received424
- TCP Segments Retransmitted424
- TCP Segments Transmitted424
- TCP Timeout Min424
- TCP Active Opens425
- TCP Attempt Failures425
- TCP Connection Limit425
- TCP Current Established425
- TCP Established Resets425
- TCP Passive Opens425
- TCP Timeout Max425
- UDP Datagrams Received425
- UDP Datagrams Transmitted425
  - Monitor | Statistics | MIB-II | IP426
  - Packets Received (Total)426
  - Refresh426
- UDP Errored Datagrams426
- Outbound Packets Discarded427
- Outbound Packets with no Route427
- Packets Forwarded427
- Packets Received (Delivered)427
- Fragmentation Failures428
- Fragmentation Successes428
- Fragments Created428
- Fragments Needing Reassembly428
- Packets Transmitted (Requests)428
- Reassembly Failures428
- Reassembly Successes428
Monitor | Statistics | MIB-II | RIP429
- Global Queries429
- Global Route Changes429
- Refresh429
Monitor | Statistics | MIB-II | OSPF431
- Refresh431
- Designated Routers432
- External LSA Checksum432
- External LSA Count432
- LSA Database Limit432
- Lsas Originated432
- New Lsas Received432
- Router ID432
Version432
- Backup Designated Router433
- Designated Router433
- Neighbors433
- Router ID433
- State434
  - Areas434
- SPF Runs434
- Sequence435
Monitor | Statistics | MIB-II | ICMP436
- Destination Unreachable Received / Transmitted436
- Errors Received / Transmitted436
- Refresh436
- Total Received / Transmitted436
- Parameter Problems Received / Transmitted437
- Redirects Received / Transmitted437
- Source Quench Received / Transmitted437
- Time Exceeded Received / Transmitted437
- Timestamp Replies Received / Transmitted437
- Timestamp Requests Received / Transmitted437
- Address Mask Replies Received / Transmitted438
- Mapping Type439
- Physical Address439
  - Interface439
  - IP Address439
- Alignment Errors440
- Carrier Sense Errors440
- FCS Errors440
Monitor | Statistics | MIB-II | Ethernet440
- Interface440
- Refresh440
- Deferred Transmits441
- Excessive Collisions441
- Frame too Long Errors441
- Late Collisions441
- MAC Errors: Receive441
- MAC Errors: Transmit441
- Multiple Collisions441
- Single Collisions441
- SQE Test Errors441
- Bad Version442
- Requests Received442
- Speed (Mbps)442
- Bad Community String443
- Parsing Errors443
- Proxy Drops443
- Silent Drops443
Accessing the CLI445
- Console Access445
Starting the CLI446
- Telnet or Telnet/Ssl Access446
- Choosing Menu Items447
- Entering Values447
Using the CLI447
- Specifying Configured Items448
- Navigating Quickly through the CLI449
  - Using Shortcut Numbers449
  - Using Back and Home450
- Getting Help Information450
- Saving the Configuration File451
- Stopping the CLI451
- Understanding CLI Access Rights451
CLI Menu Reference452
- Main Menu452
- Crash Dump File467
- Event Logs467
- Browser Back or Forward Button Displays an Incorrect Screen or Incorrect Data468
- Browser Refresh / Reload Button Logs out the Manager468
- Configuration Files468
VPN Concentrator Manager Errors468
- Invalid Login or Session Timeout469
- Error / an Error Has Occurred While Attempting to Perform470
- You Are Using an Old Browser or Have Disabled Javascript471
- Not Allowed / You Do Not Have Sufficient Authorization472
- Microsoft Internet Explorer Script Error: no such Interface Supported473
- Not Found / an Error Has Occurred While Attempting to Access473
Command Line Interface Errors474
- ERROR:-- Bad IP Address/Subnet Mask/Wildcard Mask/Area ID474
- ERROR:-- out of Range Value Entered. Try Again474
- ERROR:-- the Passwords Do Not Match. Please Try Again474
LED Indicators475
- VPN Concentrator Leds (Front)476
- SEP (Scalable Encryption Processing) Module Leds (Model 3015–3080 Only)477
- VPN Concentrator Leds (Rear)477
- WAN Interface Module Leds478
Software License Agreement of Cisco Systems, Inc481
- Limited Warranty482
Other Licenses483
- Dhcp Client484
- Telnet Server488
Regulatory Agency Notices489
- Notice to Users of T1 Service489
- Notice to Users of Certified Component Devices490
- Affidavit (Appendix A)491

Table of Contents

Related product manuals