Chapter Review

This chapter looked at configuring the VPN 3002 client and the VPN 3000 concentrators to support the VPN client features.

The VPN 3002 Hardware Client is a dedicated VPN device that can be used to connect one or more devices, including workstations, servers, hubs, cash registers, printers, and IP telephones to a company’s central network. The 3002 unit eliminates the need to install and configure VPN client software on the local workstation(s), plus it supports workstations running any TCP/IP supporting OS.

Configuring the VPN 3002 can be accomplished using a menu-driven version of the CLI or the more user-friendly Client Manager web-based application. The two systems have virtually identical steps and menu options making it easier to use both as needed.

The Quick Configuration option is used to provide the basic parameters required for connecting to a VPN Concentrator, which will “push” the basic IPSec configuration and security policy features down to the client. A wide variety of features can be configured on the VPN Concentrator to be pushed out to either VPN 3002 or VPN software clients. An auto-update feature facilitates configuration, software, and firmware upgrades.

Questions

1.?	What is another name for VPN PAT mode? Network Extension mode Client mode Network Extension Mode per Group Split tunnel mode
2.?	Which of the following is not an IPSec implementation used by the VPN 3002? IPSec over TCP IPSec over UTP IPSec over NAT-T IPSec over PPTP
3.?	The VPN 3002 CLI is most like which of the following? Cisco IOS routers Cisco Catalyst 5000 and 6000 switches The PIX Firewall None of the above
4.?	Which one of the following is not one of the three main menu sections for the VPN 3002? Monitoring Reporting Configuration Administration
5.?	What is the command to upgrade the VPN 3002 software? copy tftp flash copy tftp nvram copy tftp backup None of the above
6.?	Which of the following is a growing protocol for connecting ISPs through broadband connections like DSL/cable systems? PPP PPPoE Ethernet BGP
7.?	What is the first feature(s) set with Quick Configuration? Upload an Existing Configuration file Configure the Public Interface Set the System Time, Date, and Time Zone Configure DNS
8.?	Where might the DHCP Server feature be configured on the VPN 3002? Public interface Private interface Public or private interfaces None of the above
9.?	In which two cases would PAT always be used on outbound traffic? Network extension mode Split tunnels Client mode PPPoE
10.?	Which feature can be configured on either the VPN 3002 or the Concentrator? Interactive Unit Authentication IPSec Server Load Balancing Individual User Authentication IPSec backup servers
11.?	Which feature requires Virtual Cluster protocol configuration? Interactive Unit Authentication IPSec Server load balancing Individual User Authentication IPSec backup servers
12.?	Reverse Route Injection refers to which of the following? Inserting main network routes in remote network route tables Making main network routes available to all remote VPN clients Inserting remote network routes in main network route tables Exchanging routes both ways between main and branch networks
13.?	Which Cisco protocol allows wireless users to authenticate over VPN links? NAT Traversal (NAT-T) LEAP Bypass RRI PPPoE
14.?	Which of the following is not supported by Client Update features? VPN Software Firmware on VPN 3002 Push Banner to VPN 3002 VPN configurations
15.?	Which of the following might create problems for wireless users behind the VPN 3002? IPSec over NAT-T Interactive Hardware Client Authentication Individual User Authentication AES Support and Diffie-Hellman Group

Answers

1.?	B. Client mode
2.?	D. IPSec over PPTP
3.?	D. None of the above. It is menu-driven, somewhat like the old 1900 switches
4.?	B. Reporting
5.?	D. None of the above. This is a menu-driven process
6.?	B. PPPoE
7.?	C. Set the System Time, Date, and Time Zone
8.?	B. Private interface. Where the LAN connects
9.?	B. Split tunnels, and C. Client mode
10.?	D. IPSec backup servers
11.?	B. IPSec Server load balancing
12.?	C. Inserting remote network routes in main network route tables
13.?	B. LEAP Bypass
14.?	C. Push Banner to VPN 3002
15.?	B. Interactive Hardware Client Authentication. The wireless clients would have to wait for a wired user to authenticate the VPN 3002 to the Concentrator.