Cisco Systems VPN 5000 Network Router User Manual


 
A-3
Cisco VPN 5000 Client User Guide for Mac OS X
OL-1446-02
Appendix A Configuration File Keywords
VPN User
PAPAuthSecret =
pass_phrase
Sets the secret used between the VPN 5000
concentrator and the client. This secret
authenticates and encrypts packets exchanged
before passing them on to the RADIUS server
. Use
this keyword if the RADIUS server is set to use
PAP for authentication instead of CHAP. The
PAPAuthSecret must match the secret configured
in the RADIUS section of the VPN 5000
concentrator. Save Secrets must also be enabled on
the concentrator.
IPEnabled = {True |
False}
When the IPEnabled keyword is true, the
VPN client enables IP-in-IP tunneling to the
corporate network.
ExcludeLocalLAN =
{True | False}
When the ExcludeLocalLAN keyword is true,
local LAN traffic is not tunneled. You must also
enable the ExcludeLocalLAN keyword in the
VPN Group configuration of the VPN 5000
concentrator.
ExcludeDHCP =
{True | False}
When the ExcludeDHCP keyword is true,
DHCP traffic is not tunneled.
UsefTCP = {True |
False}
When the UsefTCP keyword is true, you enable
Network Address Translation (NAT) transparency
for client sessions. Set this keyword if you
experience a problem connecting through a
NAT device or through an ISP.
FTCPDestinationPort
= Number
Sets the NAT port you want to use.
The value can be between 0 and 65536. The
default is 80. If you leave this value blank or
specify a value outside the valid range, the value
of 80 is assumed by the VPN client.
This port must match the number set in the
NATTransport keyword in the General section
for the concentrator.
Table A-2 VPN User Section Keywords (continued)
Keyword Description