170Chapter 4 Configuring the domain

2Enter the TunnelGuard information in the applicable fields. Table 22 describes the TunnelGuard Configuration fields.

Table 22 TunnelGuard Configuration fields

Field

Description

 

 

Recheck Interval

Specifies the time interval between SRS rule rechecks

 

made by the TunnelGuard applet on the client machine.

 

Accepts an integer that indicates the time interval in

 

seconds (s), minutes (m), or hours (h). The valid range is

 

60s (1m) to 86400s (24h). The default is 15m (15 minutes).

 

If a recheck fails, the Nortel SNAS 4050 terminates the

 

session and evicts the client from the portal.

 

 

Action on Failure

Specifies the action to be performed if the client fails the

 

TunnelGuard SRS rule check. The options are:

 

• Restricted — the session remains intact, but access is

 

restricted in accordance with the rights specified in the

 

access rules for the group

 

• Tear Down — the SSL session is torn down

 

 

Heart Beat Interval

Specifies the time interval between checks for client

 

activity.

 

Accepts an integer that indicates the time interval in

 

seconds (s), minutes (m), or hours (h). The valid range is

 

60s (1m) to 86400s (24h). The default is 1m (1 minute).

 

 

Heart Beat Retry Count

Specifies the number of times the Nortel SNAS 4050 will

 

repeat the check for client activity when no heartbeat is

 

detected.

 

Acceptable range is an integer from 1–65535. The default

 

is 3.

 

If no heartbeat is detected after the specified number of

 

retries (the inactivity interval), the Nortel SNAS 4050

 

terminates the session.

 

 

Status-quo Mode

Specifies whether the Nortel SNAS 4050 domain operates

 

in status-quo mode. Status-quo mode determines the

 

behavior of the Nortel SNAS 4050 if no client activity is

 

detected after the inactivity interval.

 

If selected (status-quo on), then the client session

 

continues indefinitely.

 

If not selected (status-quo off), the Nortel SNAS 4050

 

terminates the session immediately.

 

The default is status-quo off (not selected).

 

 

320818-A

Page 170
Image 170
Nortel Networks 4050 manual TunnelGuard Configuration fields