Network Administrator's Guide

This chapter describes how network administrators can pre-configure the VPN 5000 Client for Windows installer to include:

customized logos and icons
customized help files
a customized configuration file
a pre-configured root certificate

Creating the OE M Folder

The OEM folder is where the network administrator puts any pre-configured files for users.

Create a new folder in the IntraPort Client directory called oem. This folder must reside in the same directory as the install file.

C ustomi zing the VPN 5000 Client Logo (Windows only)

This section describes how to place a company logo (or any customized logo) in the VPN Client program you send to remote users.

You can place a customized logo:

as an icon on the start menu
as a shortcut on the desktop
on the Client window General tab.

Creat ing an Icon on the General Tab

To place an icon on the General tab:

Create a file of your icon, using a size of 64 x 64 pixels, and save it as logo.bmp in the oem folder.

Creating a Customized Desktop and Start Menu Icon

To place your own icon on the desktop and start menu, create a file of your icon, using a size of 64 x 64 pixels, and save it as oem.ico in the oem folder

This section describes how to create a customized help file. A customized help file can contain information specifically designed for your remote users. For example, the help file could have contact information for technical support questions, a listing of available IP addresses and their locations, or special instructions for the remote user.

The installer automatically installs a help file for users of the Mac OS VPN 5000 Client. A help file is not part of the Windows VPN 5000 Client.

To create a help file for a Windows VPN 5000 Client, create a text file named help.txt and save it in the oem folder. The Help tab automatically appears to display the help text when the user opens the client.

C reating a Cust omized Configuration File

Administrators can include a configuration file with the installer with pre-defined settings for server addresses, protocols, and secrets.

If you want to pre-configure the user password, you can create separate installer folders for each user that contain the individualized configuration files.

To include a customized configuration file, called vpn_config, with the installer:

Step 1 Create the vpn_config file with any text editing program.

See "Configuration File Keywords." for the file contents, options, and syntax.

Step 2 Copy the vpn_config file into the oem folder.

When the user installs the client, the installer copies the oem folder contents into the client directory.

Note Cisco recommends that administrators run the pre-configured vpn_config on a test unit before distribution to users.

R oo t Certificates

Administrators can provide a root certificate for the VPN 5000 Client to establish the tunnel with the concentrator.

Each client uses a root certificate file, called rootcert, which is generated by the same Certificate Authority (CA) that generated the server's certificate. The root certificate identifies the CA to the client, and all clients connecting to servers certified by the same CA use the same root certificate.

See the server configuration guide for information about generating the root certificate.

To include the root certificate with the installer:

Step 1 If necessary, create a folder called oem in the installer folder.

Step 2 Copy the rootcert file, which contains the root certificate in PEM format, into the oem folder.

When the client connects to the server, the client authenticates the server certificate using its root certificate.

Table of Contents