Installing the VPN Client | Cisco Systems OL-5490-01 guide

Chapter 2 Installing the VPN Client

Bundling a Root Certificate with the Installation Package for Darwin

Bundling a Root Certificate with the Installation Package for Darwin

To use mutual authentication, the VPN Client computer must have a root certificate installed. You can bundle a root certificate with the installation package so that the root certificate is installed automatically. The following steps place a root certificate with the installation package. The root certificate is contained in a file. The name of the file must be rootcert with no extension.

Step 1 In the GUI, double-click vpnclient-darwin-<version>-K9.dmgor using the CLI, open vpnclient-darwin-<version>-K9.dmg.

Step 2 In the GUI, drag and drop the root certificate into the CiscoVPNClient folder on the desktop, making sure the file is renamed to rootcert or using the CLI, enter the following command.

cp -f <path_to_root_cert>/<root_cert_filename> /Volumes/CiscoVPNClient

Step 3 In the GUI, press <Apple>-Ewhile focusing on the CiscoVPNClient folder or using the CLI, enter the following command.

umount /Volumes/CiscoVPNClient

Installing the VPN Client

The following sections describe how to install the VPN Client software. The VPN Client for Mac OS X installer program installs, by default, both the graphical user interface and the command-line version of the VPN Client. However, you are not required to install the GUI. See the “Choosing the Installation Type” section on page 2-8for more information.

Note We recommend that you uninstall any previous version of the VPN Client for Mac OS X before you install a new version. For more information, see “Uninstalling the VPN Client” section on page 2-12.

Authentication

Before you can start the installation process, you must show that you have installation privileges.

Step 1 Open the installer package by double-clicking the Cisco VPN Client.mpkg file that resides in the installer directory. (See Figure 2-2).

The Authorization window appears (Figure 2-3). You must have an administrator password to install the VPN Client application.

VPN Client User Guide for Mac OS X

2-4	OL-5490-01

Image 24

Cisco Systems OL-5490-01 manual Installing the VPN Client, Authentication

Contents

VPN Client User Guide for Mac OS VPN Client User Guide for Mac OS N T E N T S Authentication Changing the Password on a Personal Certificate Notifications Contents Audience Related Documentation TerminologyDocument Conventions Obtaining Documentation Data FormatsCisco.com Documentation CD-ROM Obtaining Technical Assistance Ordering DocumentationDocumentation Feedback Technical Assistance Center Cisco TAC Website Obtaining Additional Publications and Information Cisco TAC Escalation Center Understanding the VPN Client Connection Technologies VPN Client Overview VPN Client Features Program Features Administrator Guide Authentication Features IPSec Features VPN Client IPSec Attributes IPSec Attribute Description Xauth OL-5490-01 Verifying System Requirements Gathering Information You Need Preconfiguring the VPN Client Obtaining the VPN Client Software Preconfiguring the User Profile Preconfiguring the Global Profile Installing the VPN Client Authentication Authorization Window VPN Client Installation Process Introduction Accepting the License Agreement Selecting the Application Destination Choosing the Installation Type Select Destination Window Easy Install Window 10 Install Software Progress Window 11 Successful Installation Confirmation Window Uninstalling the VPN Client CLI Version Install Script Notes Sudo /usr/local/bin/vpnuninstall Enter your password OL-5490-01 Navigating the User Interface VPN Client Menu Choosing a Run Mode Operating in Simple ModeVPN Client Window-Simple Mode Main Menus-Simple Mode Connection Entries MenuStatus Menu Operating in Advanced Mode VPN Client Window-Advanced Mode Toolbar Action Buttons-Advanced Mode Main Tabs-Advanced Mode Main Menus-Advanced Mode Connection Entries Menu Certificates Menu 10 Status Menu Right-Click Menus Log Menu Connection Entries Tab Right-Click Menu 14 Connection Entries Right-Click Menu Certificates Tab Right-Click Menu 15 Certificates Tab Right-Click Menu Configuring Connection Entries Creating a Connection Entry VPN Client Window Authentication Methods Group Authentication Mutual Group Authentication Certificate Authentication Certificate Authentication Transport Settings Transport Parameters Enable Transport Tunneling Transparent Tunneling ModeAllow Local LAN Access Backup Servers Peer Response Timeout Enter the hostname or IP address of the backup server to add Configuring Connection Entries Backup Servers Checking Prerequisites Establishing a Connection 2shows the VPN Client window in simple mode Choosing Authentication Methods Connecting to a Default Connection EntryShared Key Authentication VPN Group Name and Password Authentication Radius Server Authentication SecurID Authentication User Authentication for Radius Using Digital Certificates User Authentication for RSA SecurID Using the Certificate Store Enrolling and Managing Certificates Enrolling Certificates Certificate Store Online Certificate Enrollment Entry Field Description Managing Enrollment Requests Viewing the Enrollment RequestDeleting an Enrollment Request Changing the Password on an Enrollment Request Retrying an Enrollment Request Importing a Certificate Viewing a Certificate Certificate Properties Exporting a Certificate Whether the export is successful Deleting a Certificate Successful Export Prompt 11 Password Prompt for Deleting Enrollment Certificates Verifying a Certificate Changing the Password on a Personal Certificate Managing Connection Entries Importing a Connection Entry Modifying a Connection Entry Import VPN Connection Connection Entry Settings Deleting a Connection Entry Enable Logging Event Logging Clear Logging Set Logging Options Log Class Description Module Opening the Log Window Logging Levels Viewing Statistics Log Window Tunnel Details Field Description Cisco VPN Client Administrator Guide lists all Route Details Notifications Statistics Window-Route Details 10 Notifications Window D E IN-2 IN-3 IN-4 IN-5 IN-6 IN-7 IN-8