Manuals / Cisco Systems / Computer Equipment / Network Router

Cisco Systems RVL200 manual Troubleshooting, Appendix D, Active Directory Server

Models: RVL200

1 117

Download 117 pages 36.96 Kb

Page 78

Image 78

Appendix D

Active Directory Server

Troubleshooting

If your users are unable to connect via Active Directory, check the following:

•The time settings between the Active Directory server and the Router must be synchronized. Kerberos authentication, used by Active Directory to authenticate clients, permits a maximum of a 15- minute time difference between the Windows server and the client (the Router).

•Make sure that your Windows server is configured for Active Directory authentication. If you are using a Windows NT 4.0 server, then your server only supports NT Domain authentication. Typically, Windows 2000 and 2003 servers are also configured for NT Domain authentication to support legacy Windows clients.

4-Port SSL/IPSec VPN Router

Page 78

Image 78

Cisco Systems RVL200 manual Troubleshooting, Appendix D, Active Directory Server

Contents

BUSINESS SERIES 4-Port SSL/IPSec VPN RouterUSER GUIDE Model RVL200Icon Descriptions About This GuideAbout This Guide Online ResourcesChapter 4 Advanced Configuration Table of ContentsChapter 3 Installation Chapter 1 IntroductionTable of Contents Setup One-to-One NATSSL VPN Certificate Management Table of ContentsIPSec VPN Gateway to Gateway SSL VPN User ManagementAppendix G Lightweight Directory Access Protocol LDAP Server Appendix A TroubleshootingAppendix F Internet Authentication Service IAS Server Appendix B Virtual Passage SSL VPN ClientAppendix J IPSec NAT Traversal Appendix K Configuration of Multiple SubnetsAppendix I Gateway-to-Gateway VPN Tunnel Appendix L Multiple VLANs with ComputersAppendix Q Specifications Appendix O Firmware UpgradeAppendix P Battery Replacement Appendix N Access of Multiple VLANs over a SSL VPN TunnelIntroduction ChapterChapter Introduction Introduction to the RouterComputer using SSL VPN client software to VPN Router IntroductionChapter Front Panel Chapter Product OverviewProduct Overview Back PanelPhysical Installation Chapter InstallationInstallation Horizontal PlacementInstallation Cable ConnectionChapter Overview Chapter Advanced ConfigurationAdvanced Configuration Before You Begin10. Select Enable ActiveX How to Access the Web-Based Utility7. Select Allow cookies 8. Select Enable JavaScript 9. Click Advanced 13. Click Security 14. Select Use SSL 2.0 and Use SSLSystem Information Advanced ConfigurationSystem Summary ChapterIPSec VPN Setting Status Network Setting StatusFirewall Setting Status SSL VPN Setting StatusNetwork Setup Tab NetworkLAN Setting WAN Connection TypeAdvanced Configuration Static IPPPPoE Point-to-Point Protocol over Ethernet ChapterAdvanced Configuration Setup PasswordPPTP Point-to-Point Tunneling Protocol ChapterPassword Setup TimeSetup DMZ Host TimePort Range Forwarding Setup Tab ForwardingForwarding Port TriggeringAdvanced Configuration Setup UPnPUPnP ChapterOne-to-One NAT Setup One-to-One NATSetup MAC Clone Advanced ConfigurationMAC Clone Setup DDNSSetup Advanced Routing DDNSAdvanced Configuration DHCP SetupStatic Routing ChapterStatic IP SetupDynamic IP WINSDHCP Multiple VLANs DHCP StatusStatus Multiple VLANsDHCP Inter-VLAN Routing System Management DiagnosticDiagnostic Inter-VLAN RoutingFirmware Upgrade System Management Factory DefaultFactory Default System Management Firmware UpgradeExport Configuration File System Management Setting BackupImport Configuration File System Management Port MirroringPort Management Port Status Port Management Port SetupBasic Per Port Config Port StatusPort Management Create VLAN Port Management Port SettingPort Setting Port Management VLAN MembershipBandwidth Management QoS Bandwidth ManagementVLAN Membership Port VLAN SummaryAdvanced Configuration Rate ControlPriority ChapterTrust Mode Default CoS QoS QoS SetupQoS Setup QoS ModeQueue Settings QoS Queue SettingsQoS DSCP Settings CoS SettingsGeneral DSCP SettingsFirewall General DSCP to QueueRestrict WEB Features Firewall Access RulesAccess Rules Advanced ConfigurationAdvanced Configuration Add a New Access RuleServices ChapterScheduling Firewall Content FilterContent Filter IP/MAC GroupWebsite Blocking by Keywords IPSec VPN SummaryForbidden Domains IP AddressSummary Local Group SetupIPSec VPN Gateway to Gateway Add a New TunnelRemote Security Gateway Type Remote Group SetupLocal Security Group Type Advanced ConfigurationRemote Security Group Type Advanced ConfigurationChapter Advanced Configuration IPSec SetupIKE with Preshared Key ChapterChapter AdvancedAdvanced Configuration ManualSSL VPN Certificate Management IPSec VPN VPN Pass ThroughSSL VPN Summary VPN Pass ThroughUser Management Authentication TypeSSL VPN User Management Edit GroupAdvanced Configuration SSL VPN Virtual PassageEdit User ChapterGlobal Parameters SNMP Global ParametersVirtual Passage Client Address RangeSNMP Views DefaultDefaultSuper SNMP Group ProfileGroup Membership SNMP Group MembershipSNMP Communities CommunitiesBasic SNMP Notification RecipientNotification Recipient AdvancedSNMPv1,2 Table Log System LogSystem Log SNMPv3 TableAlert Log Log SettingLog System Statistics General LogAdvanced Configuration Basic SetupWizard ChapterAdvanced Configuration Obtain an IP automaticallyPPPoE ChapterSave Settings Access Rule SetupAdvanced Configuration Access Rules PolicyChapter Advanced ConfigurationSelect the Service Select the LogManual SupportLogout Linksys Web SiteAdvanced Configuration ChapterLogout Appendix A Appendix A TroubleshootingTroubleshooting The firmware upgrade has failedBefore You Begin Windows OS Appendix BAppendix B Virtual Passage SSL VPN Client Virtual Passage SSL VPN ClientMake the SSL VPN Portal a Trusted Site Windows OS 7. Click Allow cookies 8. Click Enable JavaScript 9. Click Advanced10. Click Enable ActiveX Virtual Passage SSL VPN ClientAppendix B Installation of the Virtual Passage Client Windows OSLogin for the SSL VPN Portal Windows OS Virtual Passage SSL VPN ClientAppendix B Logout of the SSL VPN Portal Windows OSClick Continue Anyway Virtual Passage SSL VPN ClientWindows Vista Usage Installation of the Virtual Passage Client Mac OSLogin for the SSL VPN Portal Mac OS Appendix BAppendix B Removal of the Virtual Passage Client Mac OSClick Continue Virtual Passage SSL VPN ClientBefore You Begin Linux OS Installation of the Virtual Passage Client Linux OSLogin for the SSL VPN Portal Linux OS Appendix BRemoval of the Virtual Passage Client Linux OS Appendix BVirtual Passage SSL VPN Client Appendix C Bandwidth Management Creation of New ServicesAppendix C Bandwidth ManagementBandwidth Management 29. Click Save SettingsCreation of New Bandwidth Management Rules Appendix CAppendix D 2. Click Settings 3. Click Control Panel4. Double-click Administrative Tools Appendix D Active Directory ServerWelcome to the Active Directory Installation Wizard 11. Select Domain controller for a new domain, and then click Next12. Select Domain in a new forest, and then click Next Appendix DAppendix D NetBIOS Domain NameShared System Volume Active Directory ServerActive Directory Server Appendix DTroubleshooting Appendix DActive Directory Server User for the Active Directory Server Appendix EAppendix E User for the Active Directory Server 5. Click Active Directory Users and Computers9. Click Finish to create the new user User for the Active Directory ServerAppendix E New Object User SummarySelect Internet Authentication Service. Click OK. Then click Next Appendix F Internet Authentication Service IAS ServerInternet Authentication Service IAS Server 6. Click Settings 7. Click Control PanelPolicy Configuration Method Internet Authentication Service IAS ServerWelcome to the New Remote Access Policy Wizard Appendix F18. Click Edit Profile 17. Select Grant remote access permission, and then click NextSelect Unencrypted authentication. Click Apply Internet Authentication Service IAS Server27. Click Internet Authentication Service 24. Click Settings 25. Click Control Panel26. Double-click Administrative Tools Internet Authentication Service IAS ServerAppendix F Internet Authentication Service IAS ServerPolicy Configuration Method Welcome to the New Connection Request Policy WizardAuthentication 35. Click Edit ProfileInternet Authentication Service IAS Server Appendix F7. Click Save Settings Appendix G Lightweight Directory Access Protocol LDAP ServerLightweight Directory Access Protocol LDAP Server Appendix GAppendix H 5. Click Save Settings18. Select HTTPSTCP/443~443 from the Service drop- down menu Appendix H Deployment in an Existing NetworkWAN-to-LAN Connection Deployment in an Existing NetworkAppendix H Appendix Configuration when the Remote Gateway Uses a Static IP AddressConfiguration of the RVL200 Appendix Gateway-to-Gateway VPN TunnelGateway-to-Gateway VPN Tunnel Configuration of the RV082Configuration of PC 1 and PC AppendixConfiguration of the RV082 Configuration when the Remote Gateway Uses a Dynamic IP AddressConfiguration of the RVL200 AppendixConfiguration of the RVL200 Configuration when Both Gateways Use Dynamic IP AddressesConfiguration of PC 1 and PC AppendixAppendix Configuration of the RV082Configuration of PC 1 and PC Gateway-to-Gateway VPN TunnelAppendix J Configuration of ScenarioConfiguration of Router A Appendix J IPSec NAT TraversalAppendix J Configuration of Router BIPSec NAT Traversal 4. Click the Gateway to Gateway tabOne-to-One NAT Rule on NAT 1 - RV042 Configuration of the One-to-One NAT RulesOne-to-One NAT Rule on NAT 2 - RV042 Configuration of ScenarioIPSec NAT Traversal Configuration of Router AAppendix J 4. Click the Gateway to Gateway tabRVL200 Configuration Configuration of MultipleRVL200-to-RV042 Configuration Configuration of Multiple Subnets16. Click the Advanced Routing tab RV042 #1 Configuration12. Click Save Setting 5. Click the Advanced Routing tab16. Click Save Settings RV042 #2 Configuration13. Click Save Settings Configuration of Multiple SubnetsAppendix L RVL200-to-SRW2048 ConfigurationDefault VLAN1 Appendix L Multiple VLANs with Computers14. Click Save Settings 15. Click the VLAN Membership tab SRW2048 Configuration5. Select Enable VLAN 25. Click Save SettingsAppendix M RVL200 ConfigurationSelect Enable Multiple VLANs Appendix M3. Click the Inter-VLAN Routing tab 10. Click Save SettingsInter-VLAN Routing Option 5. Click Save Settings2. Select Programs Accessories Command Prompt Access of Multiple VLANsAccess of Multiple VLANs over a SSL VPN Tunnel Appendix NAppendix O Appendix O Firmware UpgradeFirmware Upgrade How to Access the Web-Based Utility2. Click the Firmware Upgrade tab Upgrade the FirmwareFirmware Upgrade Appendix OReplace the Lithium Battery Appendix P Battery ReplacementBattery Replacement Appendix PAppendix Q Appendix Q SpecificationsSpecifications SpecificationsLimited Warranty Appendix R Warranty InformationWarranty Information Appendix RAppendix S Regulatory Information Safety NoticesAppendix S Regulatory InformationRegulatory Information Dansk Danish - Miljøinformation for kunder i EUAppendix S Appendix S Regulatory InformationLa direttiva europea 2002/96/EC richiede che le apparecchiature Appendix S Nederlands Dutch - Milieu-informatie voor klanten in de Europese UnieNorsk Norwegian - Miljøinformasjon for kunder i EU Regulatory InformationSvenska Swedish - Miljöinformation för kunder i Europeiska unionen Slovenčina Slovene - Okoljske informacije za stranke v Evropski unijiSuomi Finnish - Ympäristöä koskevia tietoja EU- alueen asiakkaille Appendix SContact Information Appendix TAppendix T Contact Information Linksys Contact Information