HP Sa3110 - VPN Server Appliance User manual

hewlett-packard sa3000 series
vpn client deployment tool
getting started guide
Hewlett-Packard Company
HP: 5971-0888
P/N: A01447-003
March 2001

ii

iii
1Disclaimer Information in this document is provided in connection with
Hewlett-Packard Company products. No license, express or
implied, by estoppel or otherwise, to any intellectual property
rights is granted by this document. Except as provided in
Hewlett-Packard Company's Terms and Conditions of Sale for
such products, Hewlett-Packard Company assumes no liability
whatsoever, and Hewlett-Packard Company disclaims any
express or implied warranty, relating to sale and/or use of
Hewlett-Packard Company products including liability or
warranties relating to fitness for a particular purpose,
merchantability, or infringement of any patent, copyright or
other intellectual property right. Hewlett-Packard Company
products are not intended for use in medical, life saving, or life
sustaining applications.
Hewlett-Packard Company may make changes to specifications
and product descriptions at any time, without notice.
This Hewlett-Packard SA3000 Series VPN Client Deployment
Tool Getting Started Guide as well as the software described in
it is furnished under license and may only be used or copied in
accordancewiththetermsofthelicense.Theinformationinthis
manual is furnished for informational use only, is subject to
change without notice, and should not be construed as a
commitment by Hewlett-Packard Company. Hewlett-Packard
Company assumes no responsibility or liability for any errors or
inaccuracies that may appear in this document or any software
that may be provided in association with this document.
Except as permitted by such license, no part of this document
may be reproduced, stored in a retrieval system, or transmitted
inanyformorbyanymeanswithouttheexpresswrittenconsent
of Hewlett-Packard Company.
Copyright © Hewlett-Packard Company 2001.

iv

v
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Contents
Disclaimer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii
Getting Started
Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
VPN Client Deployment Tool Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Installing the VPN Client Deployment Tool
Before You Install the VPN Client Deployment Tool . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Installing the VPN Client Deployment Tool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
Installing the VPN Client Software Files
Installing the VPN Client Software Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
Using the VPN Client Deployment Tool for the First Time
Using the VPN Client Deployment Tool for the First Time. . . . . . . . . . . . . . . . . . . 4-1
Creating an E-mail Template File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Starting the VPN Client Deployment Tool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Logging In to the VPN Client Deployment Tool Manager . . . . . . . . . . . . . . . . . . . . 4-5
Adding a Corporation Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6
Adding a Device Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8
Adding a Tunnel Entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9
Creating a Client Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11
Creating a Product Profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13
Adding a User or Group Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Index-1

vi
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide

Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Getting Started
Getting Started
Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-1
VPN Client Deployment Tool Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Getting Started

1-1
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Getting Started
1Getting Started
The HP SA3000 Series VPN Client Deployment Tool application
allows you to deploy e-mail notifications that provide your end
userswithlogincredentials.WhenusersaccessyourWebserver,
they can download customized HP SA3000 Series VPN Client
software and, after installing the client, they can access your
network within minutes.
The Hewlett-Packard SA3000 Series VPN Client Deployment
Tool Getting Started Guide provides detailed information for
installing all VPN Client Deployment Tool components and
setting up the VPN Client Deployment Tool for first-time use.
Note: Be sure to review the Hewlett-Packard SA3000 Series
VPN Client Deployment Tool Release Notesbeforeyoubeginthe
installation.Afteryou install theapplication,onlineHelpisavail-
ableintheVPNClientDeploymentToolManagertohelpyouper-
form further tasks.
For more information on how to use and further set up the VPN
Client Deployment Tool, see the online Help in the application.
You can also view the online Help independently on your
workstationorfromthesoftwareCD-ROMusingabrowser such
as Internet Explorer or Netscape Navigator.
Tasks To install the VPN Client Deployment Tool:
1. Perform installation prerequisites.
2. Install the VPN Client Deployment Tool Manager and
Database.
3. Install theVPN ClientDeployment Tool Servlet on yourWeb
server.
4. Start the VPN Client Deployment Tool Database.
5. Copy the VPN Client software (for users to download) to
your computer using the Product Installation Tool.
6. Log in to the VPN Client Deployment Tool Manager.
7. Set up the VPN Client Deployment Tool for first-time use by
adding a corporation entry.

Getting Started
1-2
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
VPN Client Deployment Tool
Components
The VPN Client Deployment Tool consists of a manager,
database, servlet, and report tool components.
VPN Client
Deployment
Tool Manager
The VPN Client Deployment Tool Manager is the graphical user
interface (GUI) that performs the following functions:
• Captures, formats, and displays data
• Accessesdeploymentelementssuchasdevices,tunnels,and
users
• Lets you add, modify, or delete information entries
• Manages andcontrolsaccess to theVPN Client Deployment
Tool Database
• Allows only a single user to write to the VPN Client
Deployment Tool Database at one time
• ScanstheVPNClientDeploymentToolDatabasetogenerate
the user list
• Deploys e-mail notifications
VPN Client
Deployment
Tool Database
The VPN Client Deployment Tool Database stores the device,
tunnel, client and product profile, user, and corporation
information on those users who receive e-mail notificationsand
HP SA3000 Series VPN Client deployments.
VPN Client
Deployment
Tool Servlet
To install the VPN Client Deployment Tool Servlet, your
computer requires the following software configuration:
• Microsoft Windows NT 4.0 Server with Option Pack 4.0 (IIS
4.0 Web Server) or Windows 2000 Server
• Service Pack 5 (or higher) for Windows NT
• Access to SMTP mail services
TheVPNClientDeploymentToolServletperformsthefollowing
functions:
• Authenticates the remote user.

VPN Client Deployment Tool Components
1-3
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
• Extracts information from the VPN Client Deployment Tool
Database specific to the requesting remote user and creates
the VPNCLIENT.INI and VPNUSER.INI configuration files.
The configuration files are bundled with an installation or
upgrade of the VPN Client into a self-extracting executable
file.
• Downloads the self-extracting executable to the requesting
remote user.
Report Tool
Components The VPN Client Deployment Tool comes with several extra tool
components to help you make reporting data easy.
• Create Audit Report Tool
This program creates a text file that contains a list of users
who have logged in to the VPN Client Deployment Tool Web
server to download the VPN Client files.
• Create User Report Tool
This program creates a text file that contains a list of users
that have been notified through the Deploy window of an
available deployment.
• Purge Audit Data Tool
This program permanently erases all audit records from the
database.

Getting Started
1-4
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide

Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Installing the VPN Client Deployment Tool
Installing the VPN Client Deployment Tool
Before You Install the VPN Client Deployment Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-1
Installing the VPN Client Deployment Tool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5

Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Installing the VPN Client Deployment Tool

2-1
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Installing the VPN Client Deployment Tool
1Before You Install the VPN Client
Deployment Tool
Before you can use the HP SA3000 Series VPN Client
DeploymentToolonyour WindowsNTorWindows2000Server,
you must install the following components:
• VPN Client Deployment Tool Manager and Database
• VPN Client Deployment Tool Servlet (The Servlet contains
the necessary JRun components used by the VPN Client
Deployment Tool to allow users to download HP SA3000
Series VPN Clients.)
Note: The VPN Client Deployment Tool components may be in-
stalled oneither oneor two computers,depending on theconfig-
uration you want to use. See “Supported Configurations” in the
Hewlett-Packard SA3000 Series VPN Client Deployment Tool
Release Notes for more information.
CAUTION: When you install or upgrade the VPN Client Deploy-
ment Tool you must reboot your Windows NT Server. To avoid
additional network downtime, install the application during
scheduled maintenance periods. Otherwise, your users could
experience connection difficulties to your Web server.
IIS Script and
Permission
Types
Ensure that the IIS Script setup and permission types are
configured properly.
Steps To ensure the proper IIS Script and permission type setup:
Windows NT users:
1. Start the IIS Management Console by clicking Start and
selectingPrograms,WindowsNT 4.0OptionPack,Microsoft
Internet Information Server, Internet Service Manager.
2. Inthetree-likestructurethatappearsintheleftpane,expand
the entry for the Web site that is hosting the VPN Client
Deployment Tool. (This may be listed under “Default Web
Site.”)
3. Right-click on SCRIPTS and select Properties.
4. Select the Virtual Directory tab.

Installing the VPN Client Deployment Tool
2-2
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
5. Ensure that the LocalPath field points to the correct scripts
directory. For example, c\:Inetpub\scripts.
6. Set Permissions to Execute (including script).
Windows 2000 users:
1. Start the Internet Information Services by clicking Start and
selecting Programs, Administrative Tools, Internet Services
Manager, Internet Information Services.
2. In the tree-like structure that appears in the left pane,
expand the entry for the Web site that is hosting the VPN
Client Deployment Tool. (This may be listed under “Default
Web Site.”)
3. Right-click on SCRIPTS and select Properties.
4. Select the Virtual Directory tab.
5. Ensure that the LocalPath field points to the correct scripts
directory. For example, c\:Inetpub\scripts.
6. Set Permissions to Execute (including script).

Installing the VPN Client Deployment Tool
2-3
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
Installing the VPN Client Deployment
Tool
Steps To install the VPN Client Deployment Tool:
1. Insert the VPN Client Deployment ToolCD-ROMintotheCD-
ROM drive.
TheVPN ClientDeploymentTool installationprogramstarts
automatically.
Note: If the installation program does not start automati-
cally, select Run in the Start menu and enter <CD-ROM
drive letter>:\splash.exe and click OK.
The VPN Client Deployment Tool Welcome dialog box
appears.
2. Click Install VPN Client Deployment Tool.
The Setup Type window appears.
3. To automatically install the VPN Client Deployment Tool
Manager and Servlet, select Install Manager and Serv-
let orifyouneedtoinstallasinglecomponent,selecteither
the VCDT Manager or VCDT Servlet entry.
Installing the
VPN Client
Deployment
Tool Manager
If you select Install Manager and Servlet, the VPN Client
Deployment Tool Manager is installedfirst. If you want to install
the Servlet first or by itself, select Install VCDT Servlet and
go to “Installing the VPN Client Deployment Tool Servlet”
following this procedure.
1. In the Setup Type window, click Next.
The VPN Client Deployment Tool Manager Welcome dialog
box appears.
2. Click Next.
The Software License Agreement dialog box appears.
3. Click Yes to accept the software license agreement.
The Choose Destination Location dialog box appears.
4. Confirm the default destination (C:\Program Files\HP
SA3000 VPN\VPN Client Deployment Tool) or enter
another destination directory.

Installing the VPN Client Deployment Tool
2-4
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
5. Click Next.
The Select Program Folder dialog box appears.
6. Confirm that you want the default name VPN Client
Deployment Tool added to the Program Folders or change
the name to one you prefer.
7. Select to install VCDT Manager.
The VCDT Manager software installs.
8. IfyouelectedtoinstallboththeVPNClientDeploymentTool
Manager and VPN Client Deployment Tool Servlet
consecutively, click Finish to complete the Manager portion
of the installation. If you installed only the VPN Client
Deployment Tool Manager, select that you want to restart
your computer and click Finish.
Installing the
VPN Client
Deployment
Tool Servlet
The installation of the VPN Client Deployment Tool Servlet
begins automatically after the Manager finishes (if you selected
the option to install both the Servlet and Manager together).
1. The VCDT Servlet Welcome dialog box appears. Click Next.
The Software License Agreement dialog box appears.
2. Click Yes to agree to the software license agreement.
The Select Components dialog box appears.
3. Confirm that the JRun 2.3 is selected and click Next.
The JRun Choose Destination Location dialog box appears.
4. SelectthedirectorywhereyouwantJRuninstalled.Toselect
the default directory, click Next.
5. Select the IIS Web Server root directory that was created
when you installed IIS. To select the default directory, click
Next.
The FTP Root directory dialog box appears.
6. Select the IIS FTP root directory that was created when you
installed IIS. To select the default directory, click Next.
7. Select the IIS WWW Publishing root directory that was
created when you installed IIS. To select the default
directory, click Next.

Installing the VPN Client Deployment Tool
2-5
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide
8. Select the IIS Web Server Scripts directory that was created
when you installed IIS. To select the default directory, click
Next.
The Enter Information dialog box appears.
9. Enter the IP address of the database server. If the database
server is installed on the same computer as the VPN Client
Deployment Tool Manager, use the default IP address.
Otherwise, enter the Database server’s IP address here.
Note: If your Manager/Database and Web server are on sep-
arate computers and you have a firewall installed between
them, you must allow access to the TCP port that the Web
server uses to connect to the database. By default this is
port 2638.
10. Click Next.
If you are installing JRun for the first time, the JRun
Information dialog appears.
11. Click OK.
The Setup Complete dialog box appears.
12. Select Yes, I want to restart my computer now.
13. Click Finish to restart your computer.
The VPN Client Deployment Tool Servlet is successfully
installed.
Next, you need to use the installproduct.bat utility to copy the
VPN Client software to your server. See “Installing the HP
SA3000 Series VPN Client Software Files” on page 3-1 for
detailed information.

Installing the VPN Client Deployment Tool
2-6
Hewlett-Packard SA3000 Series VPN Client Deployment Tool Getting Started Guide