Netgear FVS336G-300NAS Specifications download pdf (Page 491)

100

101

Manage Users, Authentication, and VPN Certificates

491

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

VPN Firewall’s Authentication

Users are assigned to a group, and a group is assigned to a domain. Therefore, first create

any domains, then groups, then user accounts.

Note: Do not confuse the authentication groups with the LAN groups that

are described in Manage IPv4 LAN Groups and Hosts on page 133.

You must create name and password accounts for all users who must be able to connect to

the VPN firewall. This includes administrators, guests, and SSL VPN clients. Accounts for

IPSec VPN clients are required only if you have enabled extended authentication (XAUTH) in

your IPSec VPN configuration.

Users connecting to the VPN firewall must be authenticated before being allowed to access

the VPN firewall or the VPN-protected network. The login screen that is presented to the user

requires three items: a user name, a password, and a domain selection. The domain

determines the authentication method that is used and, for SSL connections, the portal layout

that is presented.

Note: IPSec VPN, L2TP, and PPTP users do not belong to a domain and

are not assigned to a group.

Except in the case of IPSec VPN users, when you create a user account, you must specify a

group. When you create a group, you must specify a domain.

The following table summarizes the external authentication protocols and methods that the

VPN firewall supports.

Table 9. External authentication protocols and methods

Authentication

Protocol or Method

Description

PAP Password Authentication Protocol (PAP) is a simple protocol in which the client sends a

password in clear text.

CHAP Challenge Handshake Authentication Protocol (CHAP) executes a three-way handshake

in which the client and server trade challenge messages, each responding with a hash of

the other’s challenge message, which is calculated using a shared secret value.

RADIUS A network-validated PAP or CHAP password-based authentication method that functions

with Remote Authentication Dial In User Service (RADIUS).

MIAS A network-validated PAP or CHAP password-based authentication method that functions

with Microsoft Internet Authentication Service (MIAS), which is a component of Microsoft

Windows 2003 Server.

1 2 ... 486 487 488 489 490 491 492 493 494 495 496 ... 692 693

Comments to this Manuals

No comments

Netgear FVS336G-300NAS Specifications Page 491

Comments to this Manuals