Nomadix Access Gateway, User Manual

Page: 100 / 392

A
CCESS
G
ATEWAY
88 System Administration
2.
Enable or disable the
SSL Support
feature, as required. If you enable SSL Support, you
must provide a valid
Certificate DNS Name
.
For more information about setting up SSL, go to “Setting Up the SSL Feature” on
page 342 .
SSL support allows for the creation of an end-to-end encrypted link between the Access
Gateway and its clients by enabling the Internal Web Server (IWS) to display pages under
a secure link—important when transmitting AAA information in a network.
Adding SSL support to the Access Gateway requires service providers to obtain digital
certificates from VeriSign™ to create HTTPS pages. Instructions for obtaining certificates
are provided by Nomadix.
3.
If you want to designate a portal page, you must enable the
Portal Page
feature, otherwise
leave this feature disabled.
4.
If you enabled the Portal Page feature, provide the following supporting information:

Portal Page URL

Parameter Passing (enabled or disabled)

Parameter Signing (including Method, Parameters, and Shared Secret)

Portal XML POST URL

Portal XML Post Port

Support GIS Clients (enabled or disabled)

Block IWS Login Page (enabled or disabled)
To enable SSL Support, your Access Gateway’s flash must include the server.pem,
cakey.pem, and cacert.pem certificate files (the “cacert.pem” file is provided
with your Access Gateway). For assistance, contact
Technical Support .
The Portal Page IP or DNS address are added to the IP passthrough list
automatically.
See Redirection Parameter Signing for more information about parameter
signing.
GIS stands for Generic Interface Specification, a document written by iPass.
Enabling the Smart Client option in the Access Gateway automatically supports
all GIS compliant clients using the Internal Web Server. Enabling “Support for
GIS Clients” under the Portal Page feature means that the Access Gateway will
defer the management of the GIS clients to the Portal Page server.