Ipsec Parameters Tab; Value / Inherit? - Cisco VPN 3000 User Manual

Note:
If no protocol is selected, this user cannot access or use the VPN.
Figure 12-14: Configuration | User Management | Users | Add or Modify screen, IPSec tab

IPSec Parameters tab

This tab lets you configure IP Security Protocol parameters that apply to this user. If you checked IPSec
or L2TP over IPSec under Tunneling Protocols on the General Parameters tab, configure this section.

Value / Inherit?

On this tabbed section:
• The Inherit? check box refers to group parameters: Does this specific user inherit the given setting from
the group?
– Add screen = inherit base-group parameter setting.
– Modify screen = inherit assigned-group parameter setting, which can be the base group or a
To inherit the group setting, check the box (default). To override the group setting, clear the box. If
you clear the check box, you must enter or change any corresponding Value field; do not leave the field
blank.
• The Value column thus shows either group parameter settings that also apply to this user ( Inherit?
checked), or unique parameter settings configured for this user ( Inherit? cleared). You cannot
configure a grayed-out parameter.
VPN 3000 Concentrator Series User Guide
specifically designed to work with the VPN Concentrator. However, the VPN Concentrator can
establish IPSec connections with many protocol-compliant clients.
= L2TP using IPSec for security. L2TP packets are encapsulated within IPSec, thus
L2TP over IPSec
providing an additional authentication and encryption layer for security. L2TP over IPSec is a
client-server protocol, and it provides interoperability with the Windows 2000 VPN client and other
compliant remote-access clients.
configured group.
Configuration | User Management | Users | Add or Modify
12-39