Celestix E6600, Руководство по установке

Страница: 35 / 68

34 E Series Installation Guide
•
Behind an edge device (with two network adapters)
– one adapter
connects to the perimeter network, and the other connects to the internal
network.
•
Behind an edge device (with one network adapter)
– the adapter connects
to the internal network.
ii. Public address
– enter the address that external clients will use to connect to the
network.
Note: While using an IP address is supported, the FQDN is a best practice.
For example:
da.example.com
b. Advanced
– define client parameters and assign the appliance network adapter that
DirectAccess service will use.
i. Installation type
– select the DirectAccess functionality to deploy:
•
Full DirectAccess installation
– bidirectional tunnels for remote client access
and management.
•
Client management only
– configure tunnel for remote client management.
ii. Client Group
– designate an AD security group that will manage devices that
connect through DirectAccess; leave blank to include all remote devices.
iii. Network Interfaces
– select interfaces for DirectAccess traffic.
1. Internal
– specify the internal, or LAN, network adapter in the drop menu.
2. Internet
– optional; if two adapters are used, specify the Internet, or WAN,
network adapter in the drop menu.
iv. IP-HTTPS certificate
– if a third-party certificate will be used to bind the Internet
network adapter, navigate to and select it. If it needs to be imported first, complete
the following:
a. Click the Import button.
b. Certificate Import
– navigate to and select the certificate that will be used for
authentication.
c. Password
– enter the certificate passphrase.
d. Click the Import button.
e. The imported certificate should display in the Certificate field. If not, use the
drop menu to select it.
c. GPO and NLS
i. Group Policy Object (GPO)
– leave fields blank to configure the default options,
otherwise designate predefined AD policy groups that will manage settings for
devices and servers.
1. Client GPO
– specify the name for the AD policy that will manage client
access.
2. Server GPO
– specify the name for the AD policy that will manage access to
the DirectAccess server.
ii. Network Location Server
– the NLS server will be installed on the appliance unless
an external server is designated.
1. NLS Certificate
– if an SSL certificate will be used, navigate to and select it. If
it needs to be imported first, complete the following:
a. Click the Import button.
b. Certificate Import
– navigate to and select the certificate that will be
used for authentication.
c. Password
– enter the certificate passphrase.
d. Click the Import button.
e. The imported certificate should display in the Certificate field. If not,
use the drop menu to select it.
2. NLS URL
– if an external NLS server is deployed, enter the HTTPS URL.
d. Client Settings
i. Connection Name
– create a name for the network connection that end users will
recognize.