Cisco Systems RVL200 manual SSL VPN User Management, Edit Group, Authentication Type

Chapter 4 Advanced Configuration

Generate New Certificate  Click this option to generate a new certificate. It will replace the Router’s existing certificate.

Export Certificate for Administration  The certificate for administration holds the private key and should be stored in a safe place as a backup. Select this option to store your administration certificate as a file. The default filename is RVL200_MMDD_HHMM.pem, which you can rename. Follow the on-screen instructions to select the location where you want to store your certificate. If you reset the Router to its factory defaults, then you can import the certificate and restore it on the Router.

Export Certificate for Client  Select this option to store your client certificate as a file. The default filename is RVL200_MMDD_HHMM_Client.pem, which you can rename. Follow the on-screen instructions to select the location where you want to store your certificate.

Import Certificate  Specify where your certificate (X.509 certificate in a .pem file) is located. (This is the file you previously saved using the Export Certificate for Administration option.) Click Browse and follow the on- screen instructions. After you have selected the file, click Import.

ExistingCertificate  Thefilenameofthecurrentcertificate is displayed.

SSL VPN > User Management

Define users for your SSL VPN tunnels.

SSL VPN > User Management

User Management

Edit Group

Authentication Type

Select the type you want to use: Local User Database,

RADIUS - PAP, RADIUS - CHAP, RADIUS - MSCHAP, RADIUS - MSCHAPV2, NT Domain, Active Directory,

or LDAP. Follow the instructions for the type you want to use.

Local User Database

Proceed to the “Edit User” section.

RADIUS - PAP, RADIUS - CHAP, RADIUS - MSCHAP, or

RADIUS - MSCHAPV2

RADIUS - PAP

RADIUS Server Address  Enter the IP address or domain name of the RADIUS server.

Secret Password  If required by the RADIUS server, enter an authentication secret password.

Proceed to the “Edit User” section. NT Domain

NT Domain

NT Server Address  Enter the IP address or domain name of the server. (The Router does support Linux Samba Server Authentication.)

NT Domain Name  Enter the NT authentication domain. This is the domain name configured on the Windows authentication server or Linux Samba authentication server for network authentication.

Proceed to the “Edit User” section. Active Directory

Active Directory

Server Address  Enter the IP address or domain name of the Active Directory server.

Active Directory Domain  Enter the Active Directory domain name.

4-Port SSL/IPSec VPN Router 41