Manage Users, Authentication, and VPN Certificates
296
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
To edit a VPN group:
1. Select Users > Groups. The Groups screen displays (see Figure 178 on page 294).
2. In the Action column of the List of Groups table, click the Edit table button for the group that
you want to edit. The Edit Groups screen displays. This screen i s identical to the Add
Groups screen.
3. Modify the settings as explained in the previous table.
4. Click Apply to save your changes. The modified group is displayed in the List of Groups
table.
Configure User Accounts
When you create a user account, you need to assign the user to a user group. When you
create a group, you need to assign the group to a domain that specifies the authentication
method. Therefore, you should first create any domains, then groups, and then user
accounts.
Note: IPSec VPN users always belong to the default domain (geardomain)
and default group (also geardomain) and do not need to be assigned
a user account.
There are two default user accounts:
•A user with the name admin and the password password. This is a user who has
read/write access, is associated with the domain geardomain, and is denied login from
the WAN interface by default. The user name is appended by an asterisk. You cannot
delete this user account.
•A user with the name guest and the password password. This is a user who has
read-only access, is associated with the domain geardomain, and is denied login from the
WAN interface by default. The user name is appended by an asterisk. You cannot delete
this user account.
You can create five different types of user accounts by applying one of the predefined user
types:
•SSL VPN user. A user who can log in only to the SSL VPN portal.
•Administrator. A user who has full access and the capacity to change the wireless VPN
firewall configuration (that is, read-write access).
•Guest user. A user who can only view the wireless VPN firewall configuration (that is,
read-only access).
•IPSec VPN user. A user who can make an IPSec VPN connection only through a
NETGEAR ProSafe VPN Client, and only when the XAUTH feature is enabled (see
Configure Extended Authentication (XAUTH) on page 233).
•L2TP user. A user who can connect over an L2TP connection to an L2TP client that is
located behind the wireless VPN firewall.