NETGEAR SSL312 manual Radius and NT Domain Authentication

Page 35

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

1.In the Domains menu, click Add Domain. An Add Domain window similar to the following displays.

Figure 3-2

2.From the Authentication Type pull-down menu, select Local User Database.

3.In the Domain Name field, enter a descriptive name for the authentication domain. This is the domain name users will select in order to log into the SSL VPN portal.

4.In the Portal Layout Name pull-down menu, select the name of the layout. The default layout is SSL-VPN. You can define additional layouts in the Portal Layouts screen.

5.Click Apply to update the configuration. Once the domain has been added, the domain is displayed in the table on the Domains screen

RADIUS and NT Domain Authentication

For authentication to RADIUS or Microsoft NT domains (using Kerberos), you can individually define authentication, authorization, and accounting (AAA) users and groups. This is not required, but it allows you to create separate policies or bookmarks for individual AAA users.

When a user logs in, the SSL VPN Concentrator will validate with the appropriate RADIUS or NT server that the user is authorized to log in. If the user is authorized, the SSL VPN Concentrator will check to see if a user exists in the SSL VPN Concentrator Users and Groups database. If the user is defined, then the policies and bookmarks defined for the user will apply.

Authenticating Users

3-3

v2.0, May 2007

Image 35
Contents Netgear ProSafe SSL VPN Concentrator SSL312 Reference Manual Technical Support Licensing Product and Publication Details Contents Chapter Authenticating Users Chapter Configuring the Remote Access Web Portal Chapter Monitoring and Logging Conventions, Formats and Scope About This ManualPrinting this Manual Using This ManualPrinting a Chapter Version Date Description of Changes Revision HistoryAbout the ProSafe SSL VPN Concentrator Key FeaturesChapter Introduction Microsoft Windows Web Browser RequirementsFront Panel What’s in the BoxHardware Description Back Panel Steps for Deploying the SSL312 V2.0, May Single Arm Chapter Installing the SSL312Choosing a Network Topology Routing Initial Connection to the SSL VPN Concentrator Https//192.168.1.1 Accessing the Management InterfaceV2.0, May Configuring Basic Network Settings V2.0, May Managing Certificates Installing the SSL VPN ConcentratorObtaining a Certificate from a Certificate Authority Generating a Self-Signed Certificate Uploading and Enabling the New Certificate V2.0, May Viewing and Deleting Certificates Steps for Further Configuration Authentication Domains Chapter Authenticating UsersLocal User Database Authentication Radius and NT Domain Authentication Configuring for Radius Domain Authentication Configuring for NT Domain Authentication Ldap Authentication Ldap Attribute Rules Sample Ldap AttributesQuerying an Ldap Server Sample Ldap Users and Attributes SettingsCN=Users,DC=yourdomain,DC=com Configuring for Ldap AuthenticationConfiguring for Windows Active Directory Authentication Active Directory AuthenticationV2.0, May Troubleshooting Active Directory Authentication Kerberos AuthenticationHttps//IP/Domain Name/portal/Portal Name Deleting a DomainV2.0, May Determine Your Requirements Setting Up User and Group Access PoliciesUsers, Groups and Global Policies Global Policies Editing Global Policy Settings Adding and Editing Global Policies Defining and Editing Global Bookmarks Adding a New Group Groups ConfigurationEditing Group Settings Defining and Editing Group Policies V2.0, May Defining and Editing Group Bookmarks Deleting a Group Users Configuration Adding a New User V2.0, May Editing a User V2.0, May Defining and Editing User Policies Defining and Editing a User Bookmarks Deleting a User Using Network Resource Objects to Simplify PoliciesV2.0, May V2.0, May V2.0, May V2.0, May Portal Layouts Configuring the Remote Access Web PortalPortal Options Portal Option Features for Remote UsersAdding Portal Layouts V2.0, May V2.0, May Adding Terminal Services Applications to the Portal Customizing the Banner Duplicating and Editing Portal Layouts Creating a Guide to Using the Portal V2.0, May Two Approaches for VPN SSL VPN Client Configuration Adding IP Address Ranges Adding Routes for VPN Tunnel Clients V2.0, May Configuring Applications for Port Forwarding Port Forwarding Applications/TCP Port Numbers SSH Configuring Host Name ResolutionSample SSL VPN Concentrator Configuration Chapter Additional System ConfigurationConfiguring Network Settings Default gateway address Firewall/Router address Network Interface and Default Gateway ConfigurationV2.0, May Static Route Configuration V2.0, May Network Host Table Settings Configuring DNS Settings V2.0, May Setting Date and Time System Configuration Utilities Exporting and Saving a Backup Configuration File Encrypting the Configuration FileImporting a Configuration File Upgrading the SSL VPN Concentrator Firmware Erasing the Configuration and Restoring the Default SettingsAdditional Notes on the Management Interface SSL VPN Concentrator Status Chapter Monitoring and LoggingMonitoring and Logging Active Users Event Log Log Settings Send Logs Weekly Schedule Send Logs Daily Schedule V2.0, May V2.0, May Diagnostics V2.0, May Factory Default Settings Appendix a Default Settings and Technical SpecificationsGMT Technical SpecificationsDocument Link Appendix B Related DocumentsV2.0, May Numerics IndexIndex-2 Index-3 Index-4 Index-5 Index-6
Related manuals
Manual 112 pages 5.2 Kb