3Com 3C16111 - SuperStack 3 Firewall Web Site Filter, User Manual

Page: 127 / 214

Configuring a VPN Security Association 127
SA Name
Enter a descriptive name for the Security Association in the SA Name
field. This allows you to identify the link for which this Security
Association was created.
The SA Name field is not available when using GroupVPN .
Disable This SA
Check the Disable this SA box to temporarily disable a Security
Association. The association will not be deleted but will cease to function
until the check box is unchecked.
IPSec Gateway Address
Enter the address of the target of the VPN link in the IPSec Gateway
Address field. This will typically be the address of another Firewall or a
remote client. If the client does not have a fixed IP address leave this field
blank.
This field is not available when using GroupVPN and should be left blank
if you are setting up a SA for VPN clients which do not have a fixed IP
address.
Security Policy The options in the Security policy area of the screen relate to the current
Security Association being created/modified. A description of each option
is listed below.
Require XAUTH/RADIUS (only allows VPN clients)
Check the Require XAUTH/RADIUS (only allows VPN clients) box to force
VPN clients to be authenticated by a RADIUS (Remote Authentication
Dial-In User Service) Server.
See “Configuring the Firewall to use a RADIUS Server” on page 132 for
detailed settings.
This setting is not available if the IPSec Keying Mode is set to Manual Key .
Enable Windows Networking (NetBIOS) broadcast
NetBIOS broadcasts are used when Windows PCs browse their local
network. Enabling NetBIOS broadcasts will allow Windows PCs to browse
networks on other sites that are connected by the Firewall. It will have no
effect on the local sites or connections made between sites.
DUA1611-0AAA02.book Page 127 Thursday, August 2, 2001 4:01 PM