Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
192
Setting NetExtender Client Address Range and Route
To configure the NetExtender client address range and route on the SMA/SRA appliance:
1 Navigate to
NetExtender > Client Addresses
to set the
NetExtender Client Address Range
.
Client Addresses are assigned in the same subnet of the SMA/SRA X0 interface. Exclude the SMA/SRA
appliance X0 interface and the firewall DMZ interface IP address.
2 Navigate to
NetExtender > Client Routes
.
Click
Add Client Route
to select the correct Client Routes for the authenticated remote users accessing
the private networks by way of the SMA/SRA connection.
The client route corresponds with the subnet connected to the X0 (LAN) interface of the Dell SonicWALL
NSA, TZ, or SuperMassive 9000 series.
Creating a Portal Domain with RADIUS Authentication
To create a domain using RADIUS authentication on the SMA/SRA appliance:
1 Navigate to
Portal > Domains
and click
Add Domain
.
2 Select
Radius
from the
Authentication Type
drop-down list.
3 Enter the
Domain Name
that users use in order to log in to the Secure Mobile Access portal.
Configuring a Policy on VASCO IdentiKey
To add a new policy in the VASCO Identikey Web Administration interface:
1 Log in to the Vasco Identikey Web Administration window.
2 Click the
Policies
tab and select
Create
.
3 Fill in a policy name and choose the option most suitable in your situation. If you want the policy to
inherit a setting from another policy, choose the inherit option. If you want to copy an existing policy,
choose the copy option, and if you want to make a new policy, choose the create option.
Use the following settings for the policy:
Registering the SMA/SRA as a VASCO Client
To register the SMA/SRA appliance as a VASCO client:
1 In the Vasco Identikey Web Administration window, click the
Clients
Tab and choose
Register
.
2 Select
RADIUS Client
for
Client Type
.
NOTE:
There are policies available by default, and you can also create new policies to suit
your needs
NOTE:
Configure the policy properties to use the appropriate back-end server. This can be
the same authentication service as previously used in the SMA/SRA appliance.
Table 27. Policy settings
Local Auth
Default (DIGIPASS/Password)
Back-End Auth
Default (None)
Dynamic User Registration
Default (No)
Password Autolearn
Default (No)
Stored Password Proxy
Default (No)
Windows Group Check
Default (No Check)
