Dell PowerEdge 4200 Series, Руководство администратора, Страница: 168 / 440

168 | SRA 6.0 Administrator’s Guide
Note This configuration procedure is specific to VASCO IdentiKey version 3.2. If you are using a
different version of VASCO IdentiKey, the procedure will be slightly different.
If you will be using RSA instead of VASCO, see “Configuring the RSA Authentication Manager”
on page 163 .
Setting the Time
The DIGIPASS token is based on time synchronization. Since the two-factor authentication
depends on time synchronization, it is important that the internal clocks for the SRA appliance
and the VASCO IdentiKey are set correctly.
Navigate to System > Time on the SRA appliance to select the correct time zone.
Setting DNS and the Default Route
The default route for the SRA appliance is an interface on the firewall that corresponds with the
DMZ Zone. The IP address of this firewall DMZ interface needs to be configured as the default
route for the SRA appliance.
To configure Domain Name Service and the default route:
Step 1
On the SRA management interface, navigate to Network > DNS and set the correct DNS
settings and/ or WINS Settings.
Step 2
Navigate to Network > Routes and set the correct Default Route for the SRA X0 interface.
Setting NetExtender Client Address Range and Route
To configure the NetExtender client address range and route on the SRA appliance:
Step 1
Navigate to NetExtender > Client Addresses to set the NetExtender Client Address Range .
Client Addresses will be assigned in the same subnet of the SRA X0 interface. Exclude the SRA
appliance X0 interface and the firewall DMZ interface IP address.
Step 2
Navigate to NetExtender > Client Routes.
Click the Add Client Route button to select the correct Client Routes for the authenticated
remote users accessing the private networks via the SRA connection.
The client route corresponds with the subnet connected to the X0 (LAN) interface of the Dell
SonicWALL NSA or TZ firewall.
Creating a Portal Domain with RADIUS Authentication
To create a domain using RADIUS authentication on the SRA appliance:
Step 1
Navigate to Portal > Domains and click Add Domain .
Step 2
Select Radius from the Authentication Type drop-down list.
Step 3
Enter the Domain Name that users will use in order to log into the SRA appliance portal.