Specifications

3-9
VPN 3000 Series Concentrator Getting Started
78-15733-03
Chapter 3 Using the VPN Concentrator Manager for Quick Configuration
Configuring Tunneling Protocols and Options
Step 5 In the Default Gateway field, enter the IP address or hostname of the system to which the VPN
Concentrator should route packets that are not explicitly routed. In other words, if the VPN Concentrator
has no IP routing parameters (such as RIP, OSPF, or static routes) that specify where to send packets, it
will send them to this gateway. (When you first start the VPN Concentrator, it has no IP routing
configuration parameters.) This address must not be the same as the IP address configured on any VPN
Concentrator interface. To specify no default gateway, leave the field at 0.0.0.0, which means the VPN
Concentrator drops unrouted packets.
You can configure IP routing with regular system configuration. For RIP and interface-specific OSPF,
see the Configuration | Interfaces screens. For global OSPF and static routes, see the Configuration |
System | IP Routing screens. See the VPN 3000 Series Concentrator Reference Volume I: Configuration
for more information.
Step 6 Click Continue to proceed.
Configuring Tunneling Protocols and Options
The Manager displays the Configuration | Quick | Tunneling screen.
Figure 3-6 Configuration | Quick | Tunneling Screen
You must enable at least one of these protocols for the device to function as a VPN device. PPTP and
L2TP are popular with Microsoft Windows-based clients, and the VPN 3000 Client uses IPSec.
WebVPN provides remote access over the Internet, and does not require either a software or hardware
client. To enable, disable, and configure virtual private network tunneling protocols and encryption
options on the VPN Concentrator, follow these steps:
Step 1 Check PPTP to enable Point-to-Point Tunneling Protocol. (This box is checked by default.)
Step 2 If you enable PPTP, click one of the radio buttons to select the encryption option:
• Require Encryption—PPTP connections must use Microsoft encryption to encrypt data. This option
requires MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol) and provides
maximum security. During connection setup, clients must agree to use encryption or they will not
be connected.