1-4
VPN 3000 Series Concentrator Getting Started
78-15733-03
Chapter 1 Understanding the VPN 3000 Concentrator
Software Features
Software Features
The VPN Concentrator incorporates the following virtual private networking software features:
VPN Feature
Description
Management
Interfaces
The VPN Concentrator offers multiple management interfaces. Each interface
provides complete capabilities and can be used to fully configure, administer,
and monitor the device.
•
The VPN Concentrator Manager is an HTML-based interface that lets you
manage the system remotely with a standard web browser using either of
the following:
–
HTTP connections
–
HTTPS (HTTP over SSL) secure connections
•
The VPN Concentrator command-line interface is a menu- and
command-line based interface that you can use with the local system
console or remotely using any of the following:
–
Telnet connections
–
SSHv1 (Secure Shell), including SCP (Secure Copy)
Tunneling Protocols
•
IPSec (IP Security) Protocol
–
Remote access, using Cisco VPN Client or other select IPSec
protocol-compliant clients
–
LAN-to-LAN, between peer VPN Concentrators or between a VPN
Concentrator and another IPSec protocol-compliant secure gateway
•
L2TP over IPSec (for native Windows 2000, Windows NT, and Windows
XP client compatibility)
•
WebVPN (clientless access using an HTTPS web browser)
•
PPTP (Point-to-Point Tunneling Protocol) with encryption
•
L2TP (Layer 2 Tunneling Protocol)
Encryption Algorithms
•
56-bit DES (Data Encryption Standard)
•
168-bit Triple DES
•
Microsoft Encryption (MPPE): 40-bit and 128-bit RC4
•
128-bit, 192-bit, and 256-bit AES (Advanced Encryption Standard)
Authentication
Algorithms
•
MD5 (Message Digest 5)
•
SHA-1 (Secure Hash Algorithm)
•
HMAC (Hashed Message Authentication Coding) with MD5
•
HMAC with SHA-1
Key Management
•
IKE (Internet Key Exchange), formerly called ISAKMP/Oakley, with
Diffie-Hellman key technique
•
Diffie-Hellman Group 1, Group 2, Group 5, and Group 7 (ECC)
•
Perfect Forward Secrecy (PFS)
