Hewlett-Packard Company HP: 5971-0888 P/N: A01447-003 March 2001...
Page 3
Except as provided in Hewlett-Packard Company's Terms and Conditions of Sale for such products, Hewlett-Packard Company assumes no liability whatsoever, and Hewlett-Packard Company disclaims any...
Product Installation Tool. 6. Log in to the VPN Client Deployment Tool Manager. 7. Set up the VPN Client Deployment Tool for first-time use by adding a corporation entry. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
• Service Pack 5 (or higher) for Windows NT • Access to SMTP mail services The VPN Client Deployment Tool Servlet performs the following functions: • Authenticates the remote user. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 11
This program creates a text file that contains a list of users that have been notified through the Deploy window of an available deployment. • Purge Audit Data Tool This program permanently erases all audit records from the database. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 12
Getting Started Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Web site that is hosting the VPN Client Deployment Tool. (This may be listed under “Default Web Site.”) 3. Right-click on SCRIPTS and select Properties. 4. Select the Virtual Directory tab. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 16
3. Right-click on SCRIPTS and select Properties. 4. Select the Virtual Directory tab. 5. Ensure that the Local Path field points to the correct scripts directory. For example, c\:Inetpub\scripts 6. Set Permissions to Execute (including script). Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
3. Click Yes to accept the software license agreement. The Choose Destination Location dialog box appears. 4. Confirm the default destination ( C:\Program Files\HP ) or enter SA3000 VPN\VPN Client Deployment Tool another destination directory. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 18
IIS. To select the default directory, click Next. 7. Select the IIS WWW Publishing root directory that was created when you installed IIS. To select the default directory, click Next. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 19
Next, you need to use the installproduct.bat utility to copy the VPN Client software to your server. See “Installing the HP SA3000 Series VPN Client Software Files” on page 3-1 for detailed information. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 20
Installing the VPN Client Deployment Tool Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
2. In the Start Menu, select Programs, Command Prompt. The command prompt window appears. 3. Type to select the <drive letter>:\JRun directory. cd jrun 4. Type with the correct <source> and installproduct <destination> parameters and press Enter. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 24
These directories are as follows: • client95 — indicates the Windows 95/98 compatible client • clientNT — indicates the Windows NT compatible client • client2k — indicates the Windows 2000 compatible client Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 25
Adding a User or Group Entry..........4-15 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 26
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Add at least one user or group profile to deploy information. You must include the user name, description, and a valid e- mail address. See "Adding a User or Group Entry" (page 4-15). Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
2. Go to the Setup window in the VPN Client Deployment Tool Manager and select the corporation that you are using for deployment. 3. Enter the full path and file name of the template file in the Email Template File field Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 29
HP SA3000 Series VPN Client software: ^webserverurl^ Enter the following user id and password in the login form: ^userid^ user id: ^password^ password: For further assistance, please contact customer support. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
The database is installed as a service. 2. In the Windows NT or Windows 2000 Start menu, select Pro- grams, HP SA3000 VPN, HP SA3000 VCDT, Start Manager. The VPN Client Deployment Tool Login window appears. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
4. In the Corporation Selection dialog box, select a corporation entry in the drop-down list. Note: If only one corporation entry is defined, it is selected by default and opens automatically. 5. Click OK. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
7. In the Sender's Email Address field, enter the VPN Client Deployment Tool administrator's e-mail address. Note: You cannot deploy without a valid e-mail address in this field. An invalid address results in a false deployment. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 33
Login automatically takes you to the Devices window. Note: The Continue Login button is not enabled unless you have input the basic required information in the Setup win- dow for your corporation. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Devices that have polling enabled appear with a plug connector symbol next to the device name. 11. Click Poll Devices to automatically populate the Tunnels sec- tion of your corporation’s configuration if you have pollable devices defined. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
8. In the Tunnel Type drop-down list, select either SST (Shiva® Smart Tunneling) or IPSec. 9. In the Protocol field, enter the type of protocol you want to use to establish a tunnel. The default protocol is UDP. Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 36
12. In the Challenge Phrase field, enter the challenge phrase for the device. 13. Click Save. The tunnel entry you created appears in the list box, with the information you specified appearing in the appropriate columns. 4-10 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
7. Click OK when the correct tunnel assignments have been made. 8. To configure additional tunnel settings, select the tunnel that you want to configure from the list. 9. Click Tunnel Settings. 4-11 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 38
ACL rule on the VPN device. See the VPN device doc- umentation for more information. 13. Enter the shared secret (password) for the ACL (Access Control List) on the VPN device. 4-12 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
— This parameter disables the logon and does not prompt the user to log on to the VPN Client software dur- ing the Windows 95/98/2000 or Windows NT boot pro- cess. This is the default mode. 4-13 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 40
— This parameter indicates that the client does not minimize after logon. 9. Click Save. The Product Profile description appears in the description list box on the Product Profiles tab. 4-14 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
CA (Certificate Authority) Server Name, CA Server IP Address, CA CRL Update, CA Certifi- cate Renewal, and any tunnel assignments. 4-15 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 42
RADIUS user name in the Default Username field. • If you select CA Authentication, do the following: — In the Server Name field, enter a name for the Certificate Authority. 4-16 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 43
Certificate Authority settings. Then, select the Create Group check box. When you assign new users to the group, they have the same configuration. 4-17 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...
Page 44
Using the VPN Client Deployment Tool for the First Time 4-18 Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide...