Stimmen - 0, Durchschnittliche Bewertung: 0
(
)
)
|
Dieses Gerät hat auch andere Anweisungen:
Netzwerk - SL1000 (580.5 kb)
Netzwerk - SL1000 (518.95 kb)
Anleitung Zusammenfassung
2.1.2 Configuring SL1000/500 VPN Policies for Aggressive Mode
Remote Access
Aggressive Mode remote access with Xauth is a mechanism where the remote access client is
prompted for an additional login (the Xauth login). This form of remote access is more secure since an
intruder cannot access the corporate resources through a connected Laptop, which belongs to a valid
employee. In addition, normal HTTP login by the remote user is used to instantiate appropriate firewall
policies on the SL1000/500 security gateway. Once these policies are instantiated then the remote
user is allowed secure access by the gateway.
2.1.2.1 Steps to configure SL1000 system
The main configuration activities required on SL1000 system to configure remote access users are:
Group and User Administration
VPN Policy configuration for the group
Once the group and users are defined, the policies required in VPN are added and associated
with the group.
Firewall Policy Configuration for the group
If secure access is required, a inbound firewall rule is needed for the group.
Step 1: Adding VPN specific policies for group “Group1”
Use option sequence Remote Access -> VPN Tunnel
Field
Purpose
Value
Tunnel Name
Enter a unique name to identify the connection
group_ra
Remote Access radio
Make it as remote access connection
Selected
button
Local Secure Group
Select IP address, subnet or range
192.168.2.0/24
Preshared Key
A hexadecimal or ASCII shared secret
12345678
Remote ID
Match domain name of SafeNet
User1
Table 2.1 Adding VPN policy for the group “Group1” (Aggressive mode)
Copyright 2005, ASUSTek Computer, Inc.
Page 3
...Dieses Handbuch ist für folgende Modelle:
Netzwerk - SL500 (342.35 kb)