Barracuda Networks SSL VPN, Руководство администратора

Страница: 86 / 124

86 Barracuda SSL VPN Administrator’s Guide
IP Address Authentication
IP authentication relies on the physical address of a client machine and is able to determine the
validity of a user even before the login page is displayed. This type of authentication ties the user to
a specific IP address.
The Authorized IP address is set in the Manage System > Access Control > Accounts page. It is this
IP address that will be looked at when the user logs in. If the user's machine and Authorized IP do not
match the user will be unable to log into the system. The default Authorized IP is '*' which allows a
user to login from any machine.
Password Authentication
This is the most commonly used Authentication Scheme and it is the simplest and easiest to configure.
The length, format and expiration of passwords are all configurable, however initially these
parameters are defaulted and whenever the administrator creates an account a password must be
attached.
The structure of an account password is based on regular expressions and is defaulted to, .{5,}, which
defines a password with a minimum size of 5 characters. This expression is detailed in the diagram
below:
The security function password structure is built around ‘regular expression’ syntax. Any valid
regular expression can be used to parse the password. Some examples are given below:
.
Expression Meaning
X(n) X exactly n number of times
X(n,m) X between n and m times
.[^\s]{n,m} Any character except whitespaces, with a length of between n and m
number of characters
\w[n,m] Word character [a-z, A-Z,_,0-9] between n and m