![]() ![]() Allows secure transmission between the VPN Client and a secure gateway through a router serving as a firewall, which may also be performing NAT or PAT. 1 = Prompt for network logon username and password.Įnable Transparent Tunneling. 0 = (default) Use default system logon credentials i.e., use the Windows logon username and password. Specifies whether the Microsoft network accepts the user's Windows username and password for logon, or whether the Microsoft network prompts for a username and password. Specifies that users log on to a Microsoft network.Applies only to systems running Windows 9x. Legitimate Internet hostnames, or IP addresses in dotted decimal notation. List of hostnames or IP addresses of backup servers. Underbars are not allowed.Įnable backup server(s) specifies whether to use backup servers if the primary server is not available. Applies only to user authentication via a Windows NT Domain server. The NT Domain name configured for the user's IPSec group. 0 = (default) do not allow user to save password information locally. This value is pushed down from the VPN central-site device. You should only modify this parameter manually if there is no GUI interface to manage profiles.ĭetermines whether or not the user password or its encrypted version are valid in the profile. If SaveUserPassword is disabled, then the VPN Client deletes the UserPassword and does not create an encrypted version. The first time the VPN Client reads this password, it saves it in the file as the enc_UserPassword and deletes the clear-text version. The password used during extended authentication. The VPN Client prompts the user for this value during user authentication. Case-sensitive, clear text, maximum of 32 characters. The name that authenticates a user as a valid member of the IPSec group specified in GroupName. Command string: This variable includes the pathname to the command and the name of the command complete with arguments for example: "c:\isp\ispdialer.exe dialEngineering" Maximum 512 alphanumeric characters. Applies only if EnableISPconnect=1 and ISPConnectType=1. Use this parameter to specify a command to dial the user's ISP dialer. Applies only if EnableISPconnect=1 and ISPConnectType=0.ĭial-Up Networking Phonebook Entry (command). Use this parameter to dial into the Microsoft network dials the specified dial-up networking phone book entry for the user's connection. The VPN Client GUI ignores a read-only setting on this parameter.ĭial-Up Networking Phonebook Entry (Microsoft). Specifies whether the VPN Client automatically connects to an ISP before initiating the IPSec connection determines whether to use PppType parameter. Binary data represented as alphanumeric text.Ĭonnect to the Internet via Dial-Up Networking. This is the scrambled version of the GroupPwd. The password for the IPSec group that contains the user. Minimum of 4, maximum 32 alphanumeric characters. The exact password for the IPSec group configured on the VPN central-site device. The first time the VPN Client reads this password, it replaces it with an encypted one (enc_GroupPwd). The password for the IPSec group that contains this user. ![]() The exact name of the IPSec group configured on the VPN central-site device. The name of the IPSec group that contains this user. 1 = Pre-shared keys (default)ģ = Digital Certificate using an RSA signature. The AuthType will define the way the user is athenticated against the server/device. The Host line is used to provide a IP address of the VPN server/device or the domain name. The Description is a string of maximum 246 alphanumeric characters describing the use of the VPN connection So a short explanation of the main options you have in a pcf file. All you have to know is what the meaning is of every line and you can create a. A basic file looks like this the one below. pcf file a flat text file you can modify with vi to your licking. Playing with a Cisco PIX firewall is NOT an indication that I know all about it and that I know all about the cisco pcf file format. I was recently asked to prep some vpn profiles files for a customer as I have been playing around with Cisco PIX firewalls. ![]()
0 Comments
Leave a Reply. |