Configuring a VPN Security Association
127
SA Name
Enter a descriptive name for the Security Association in the
SA Name
field. This allows you to identify the link for which this Security
Association was created.
The
SA Name
field is not available when using
GroupVPN
.
Disable This SA
Check the
Disable this SA
box to temporarily disable a Security
Association. The association will not be deleted but will cease to function
until the check box is unchecked.
IPSec Gateway Address
Enter the address of the target of the VPN link in the
IPSec Gateway
Address
field. This will typically be the address of another Firewall or a
remote client. If the client does not have a fixed IP address leave this field
blank.
This field is not available when using
GroupVPN
and should be left blank
if you are setting up a SA for VPN clients which do not have a fixed IP
address.
Security Policy
The options in the
Security policy
area of the screen relate to the current
Security Association being created/modified. A description of each option
is listed below.
Require XAUTH/RADIUS (only allows VPN clients)
Check the
Require XAUTH/RADIUS (only allows VPN clients)
box to force
VPN clients to be authenticated by a RADIUS (Remote Authentication
Dial-In User Service) Server.
See “Configuring the Firewall to use a RADIUS Server” on page 132 for
detailed settings.
This setting is not available if the
IPSec Keying Mode
is set to
Manual Key
.
Enable Windows Networking (NetBIOS) broadcast
NetBIOS broadcasts are used when Windows PCs browse their local
network. Enabling NetBIOS broadcasts will allow Windows PCs to browse
networks on other sites that are connected by the Firewall. It will have no
effect on the local sites or connections made between sites.
DUA1611-0AAA02.book Page 127 Thursday, August 2, 2001 4:01 PM
Содержание 3C16111 - SuperStack 3 Firewall Web Site Filter
Страница 18: ...18 DUA1611 0AAA02 book Page 18 Thursday August 2 2001 4 01 PM ...
Страница 50: ...50 DUA1611 0AAA02 book Page 50 Thursday August 2 2001 4 01 PM ...
Страница 96: ...96 CHAPTER 6 USING THE FIREWALL DIAGNOSTIC TOOLS DUA1611 0AAA02 book Page 96 Thursday August 2 2001 4 01 PM ...
Страница 122: ...122 CHAPTER 8 ADVANCED SETTINGS DUA1611 0AAA02 book Page 122 Thursday August 2 2001 4 01 PM ...
Страница 150: ...150 CHAPTER 10 CONFIGURING HIGH AVAILABILITY DUA1611 0AAA02 book Page 150 Thursday August 2 2001 4 01 PM ...
Страница 152: ...152 DUA1611 0AAA02 book Page 152 Thursday August 2 2001 4 01 PM ...
Страница 166: ...166 CHAPTER 11 ADMINISTRATION AND ADVANCED OPERATIONS DUA1611 0AAA02 book Page 166 Thursday August 2 2001 4 01 PM ...
Страница 174: ...174 DUA1611 0AAA02 book Page 174 Thursday August 2 2001 4 01 PM ...
Страница 178: ...178 CHAPTER 13 TYPES OF ATTACK AND FIREWALL DEFENCES DUA1611 0AAA02 book Page 178 Thursday August 2 2001 4 01 PM ...
Страница 190: ...190 CHAPTER 14 NETWORKING CONCEPTS DUA1611 0AAA02 book Page 190 Thursday August 2 2001 4 01 PM ...
Страница 192: ...192 DUA1611 0AAA02 book Page 192 Thursday August 2 2001 4 01 PM ...
Страница 206: ...206 APPENDIX D TECHNICAL SUPPORT DUA1611 0AAA02 book Page 206 Thursday August 2 2001 4 01 PM ...
Страница 212: ...212 INDEX DUA1611 0AAA02 book Page 212 Thursday August 2 2001 4 01 PM ...
Страница 214: ...DUA1611 0AAA02 book Page 214 Thursday August 2 2001 4 01 PM ...