Operation: | Configure CiscoTM VPN Client
Description: | To Configure connection for CISCO VPN client.

Sample Configuration
    	<CISCOVPNClient>
    		<CISCOClientConfiguration>Enable/Disable</CISCOClientConfiguration>
    		<Name>connectionname</Name>
    		<Interface>interfacename</Interface>
    		<!-- For alias wan port -->
    		<AliasInterface>alias interfacename</AliasInterface>
    		<AuthenticationType>PresharedKey/DigitalCertificate</AuthenticationType>
    		<!-- for preshared key -->
    		<PresharedKey>key</PresharedKey>
    		<!-- for Certificate -->
    		<LocalCertificate>{certificatename}</LocalCertificate>
    		<RemoteCertificate>{certificatename}</RemoteCertificate>

    		<LocalIDType>DNS/IP Address/Email/DER ASN1 DN (X.509)</LocalIDType>
    		<LocalID>localid</LocalID>
    		<RemoteIDType>DNS/IP Address/Email/DER ASN1 DN (X.509)</RemoteIDType>
    		<RemoteID>remoteid</RemoteID>

    		<AllowedUsers>
    			<User>username</User>
    			:
    		</AllowedUsers>
    		<AssignIP>
    			<StartIP>ip address</StartIP>
    			<EndIP>ip address</EndIP>
    		</AssignIP>
    		<LeaseIPFromRadiusServer>Enable/Disable</LeaseIPFromRadiusServer>
    		<DNSServer1>ip address</DNSServer1>
    		<DNSServer2>ip address</DNSServer2>
    		<DisconnectOnIdleInterval>600</DisconnectOnIdleInterval>
    	</CISCOVPNClient>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
CISCOClientConfiguration | No | Disable | Description: Configure Cisco client information. CISCOClientConfiguration confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'y', 'n' are allowed.
AliasInterface | Yes |  | Description: Select interface from the list of WAN ports on which user will connect VPN. AliasInterface confines to: Type is 'SCALAR'. Datatype is 'STRING'.
AuthenticationType | Yes |  | Description: Select Authentication type for the Cisco VPN Client. AuthenticationType confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'psk', 'cert' are allowed.
LocalCertificate/PresharedKey | No |  | Description: Specify Preshared key or Select Local Certificate to be used by Appliance for authentication based on the Authentication type selected. LocalCertificate/PresharedKey confines to: Type is 'SCALAR'. Datatype is 'STRING'. Maximum characters allowed are 1000.
RemoteCertificate | No |  | Description: Select Certificate to be used for authentication by the remote peer. RemoteCertificate confines to: Type is 'SCALAR'. Datatype is 'STRING'.
LocalIDType | Yes |  | Description: Select Local ID type. LocalIDType confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'fqdn', 'ip', 'email', 'x509' are allowed.
LocalID | Yes |  | Description: Specify value for Local ID selected. LocalID confines to: Type is 'SCALAR'. Datatype is 'STRING'.
RemoteIDType | Yes |  | Description: Select Remote ID type. RemoteIDType confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'fqdn', 'ip', 'email', 'x509' are allowed.
RemoteID | Yes |  | Description: Specify value for Remote ID selected. RemoteID confines to: Type is 'SCALAR'. Datatype is 'STRING'.
User | Yes |  | Description: Specify users to be allowed to connect to CISCO VPN Client. User confines to: Type is 'ARRAY'. Datatype is 'STRING'. Maximum characters allowed are 50. Multiple values are allowed.
Name | Yes |  | Description: Specify client's name to be displayed. Name confines to: Type is 'SCALAR'. Datatype is 'STRING'. First character is to be alphabet (a-zA-Z). Alphanumeric (a-zA-Z0-9) and underscore (_) to be allowed for the remaining characters.
StartIP | Yes |  | Description: Specify the starting IP Address for the range from which IP Address is leased to the Client. StartIP confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
EndIP | Yes |  | Description: Specify the ending IP Address for the range from which IP Address is leased to the Client. EndIP confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
DNSServer1 | No |  | Description: Provide DNS Server IP Address. DNSServer1 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
DNSServer2 | No |  | Description: Provide Second DNS Server IP Address. DNSServer2 confines to: Type is 'SCALAR'. Datatype is 'IPADDRESS'. Maximum characters allowed are 15. IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL' is allowed.
LeaseIPFromRadiusServer | No | Disable | Description: Enable to lease IP Address through the Radius Server. LeaseIPFromRadiusServer confines to: Type is 'SCALAR'. Datatype is 'STRING'. Only 'on', 'off' are allowed.
DisconnectOnIdleInterval | No | 0 | Description: Disconnect on idle interval. DisconnectOnIdleInterval confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 120 to 999 is allowed. Maximum digits allowed are 3.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Configure CiscoTM VPN Client | 200 |
Configure CiscoTM VPN Client | 201 |
Configure CiscoTM VPN Client | 500 |
Configure CiscoTM VPN Client | 502 |
Configure CiscoTM VPN Client | 503 |
Configure CiscoTM VPN Client | 511 |
Configure CiscoTM VPN Client | 512 |
Configure CiscoTM VPN Client | 541 |

) Copyright 2015 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.