HoB HOBLink, Administration Manual

Page: 56 / 83

Configuring HOBLink VPN Gateway HOBLink VPN Gateway
56 Security Solutions by HOB
Enabled – check to enable the peer. This is enabled by default.
Description – enter a description of the peer to help identify and manage it.
Type – select the type category of the peer. Supported types are
Gateway
(default),
User
or
User Group
. The type selected here should match with the type
of the element selected under Name .
IKE version – enter the IKE version used. The supported versions are
1
(default)
and
2
.
IKEv1 scheme – select the name of the IKEv1 scheme for this peer (see Section
5.8 Internet Key Exchange (IKE) on page 42 ). This field is only shown if the IKE
version selected is
1
.
IKEv2 scheme – select the name of the IKEv2 scheme for this peer (see Section
5.8 Internet Key Exchange (IKE) on page 42 ). This field is only shown if the IKE
version selected is
2
.
IKE port – enter the number of the UDP port used for incoming IKE packets. The
value should be in the range of
1–65535
. The default is
500
.
UDP encapsulation (NAT-T) port – the number of the UDP port used for UDP
encapsulation. The value should be in the range
1–65535
. The default is
4500
.
Client authentication – the client authentication method used. The supported
methods are
local password
(default),
RADIUS
and
LDAP
. This field is only
shown when the Type is
User
or
Group
.
RADIUS group – select the RADIUS group (as previously defined in Section 5.5
Remote Authentication Dial In User Service (RADIUS) on page 35 ) to use for this
VPN peer. This field is only shown when the Type is
User
or
Group
and the Client
authentication selected is
RADIUS
.
LDAP service – select the LDAP service (as previously defined in Section 5.6
Lightweight Directory Access Protocol (LDAP) on page 37 ) to use for this VPN peer.
This field is only shown when the Type is
User
or
Group
and the Client
authentication selected is
LDAP
.
Check group membership – enable this to check the group membership of a user
during authentication. This is enabled by default. This field is only shown when the
Type is
Group
.
Use of virtual IP address – this allows the use of a virtual IP address. The
supported options are
Not used
(default),
IKE negotiation
and
L2TP/PPP
adapter
. This field is only shown when the Type is
User
or
Group
.
Virtual IP address and mask – the virtual IP address and mask of this peer (for
example
10.1.1.2/24
). This field is only shown when the Type is
User
and the
Use of virtual IP address is
IKE negotiation
.
If this checkbox is not enabled, there is no group membership check. This
means that any user that exists in the database can connect using any
group (even without membership).
This checkbox must also be enabled to allow different groups to have
different permissions.