D-Link DSR-500, User Manual

Page: 100 / 213

Unified Services Router User Manual
98

Timeout: The timeout period for reaching the authentication server.

Retries: The number of retries to authenticate with the authentication server
after which the DSR stops trying to reach the server.

Workgroup: This is required is for NT domain authentication. If there are
multiple workgroups, user can enter the details for upto two workgroups.

LDAP Base DN: This is the base domain name for the LDAP authentication
server. If there are multiple LDAP authentication servers, user can enter the
details for upto two LDAP Base DN.

Active Directory Domain: If the domain uses the Active Directory
authentication, the Active Directory domain name is required. Users
configured in the Active Directory databa se are given access to the SSL VPN
portal with their Active Directory username and password. If there are
multiple Active Directory domains, user can enter the details for upto two
authentication domains.
Once the domain is configured, the DSR will display a list of all configured domains.
Advanced > Users > Groups
Groups are used to assign access policies to a set of SSL users within a domain.
Groups are domain subsets that can be seen as types of SSL users; some groups
require access to all available network resources and some can be provided access to a
select few. With groups, a very secure hierarchy of SSL VPN remote access can be
created for all types of users with minimal number of policies to configure.
To configure a group in the DSR, enter the following information:

Name: This is a unique identifier for a group name.

Domain: This is the authenticating domain the group is attached to.

Idle timeout: This is the log in timeout period for users of this group.
Once the group is defined the DSR will display a list of all configured groups.

You must create a Domain first, and then a new Group can be created and assigned
to the Domain. The last step is to add specific SSL VPN users to an already -
configured Group.
7.1.1 User Types and Passwords
Advanced > Users > Users
User level policies can be specified by browser, IP address of the host, and whether
the user can login to the router‘s GUI in addition to the SSL VPN portal. The
following user types are assigned to a user that reaches the GUI login screen fr om
the LAN or WAN:

Administrator: This is the router‘s super -user, and can manage the router, use SSL
VPN to access network resources, and login to L2TP/PPTP servers on the WAN.
There will always be one default administrator user for the GUI.