60Chapter 2 Initial setup

The action to be performed when the TunnelGuard check fails depends on your selection in step f on page 59.

Create default tunnel guard user [no]: yes

Using 'restricted' action for TunnelGuard failure. User name: tg

User password: tg

Creating client filter 'tg_passed'. Creating client filter 'tg_failed'. Creating linkset 'tg_passed'.

Creating linkset 'tg_failed'.

Creating group 'tunnelguard' with secure access. Creating extended profile, full access when tg_passed

Enter green vlan id [110]: <VID>

Creating extended profile, remediation access when tg_failed

Enter yellow vlan id [120]: <VID>

Creating user 'tg' in group 'tunnelguard'. Initializing system......ok

Setup successful. Relogin to configure.

Settings created by the quick setup wizard

The quick setup wizard creates the following basic Nortel SNAS 4050 settings:

1A Nortel SNAS 4050 domain (Domain 1). A Nortel SNAS 4050 domain encompasses all switches, authentication servers, and remediation servers associated with that Nortel SNAS 4050.

2A virtual SSL server. A portal IP address, or pVIP, is assigned to the virtual SSL server. Clients connect to the pVIP in order to access the portal.

3A test certificate has been installed and mapped to the Nortel SNAS 4050 portal.

4The authentication method is set to Local database.

5One test user is configured. You were prompted to set a user name and password during the quick setup wizard (in this example, user name and password are both set to tg). The test user belongs to a group called tunnelguard. There are two profiles within the group: tg_passed and tg_failed. Each profile has a client filter and a linkset associated with it.

320818-A

Page 60
Image 60
Nortel Networks 4050 manual Settings created by the quick setup wizard