Table of Contents
Advertisement
Setting NetExtender Client Address Range and Route
To configure the NetExtender client address range and route on the SMA/SRA appliance:
1
Navigate to NetExtender > Client Addresses to set the NetExtender Client Address Range.
Client Addresses are assigned in the same subnet of the SMA/SRA X0 interface. Exclude the SMA/SRA
appliance X0 interface and the firewall DMZ interface IP address.
2
Navigate to NetExtender > Client Routes.
Click Add Client Route to select the correct Client Routes for the authenticated remote users accessing
the private networks by way of the SMA/SRA connection.
The client route corresponds with the subnet connected to the X0 (LAN) interface of the Dell SonicWALL
NSA, TZ, or SuperMassive 9000 series.
Creating a Portal Domain with RADIUS Authentication
To create a domain using RADIUS authentication on the SMA/SRA appliance:
1
Navigate to Portal > Domains and click Add Domain.
2
Select Radius from the Authentication Type drop-down list.
3
Enter the Domain Name that users use in order to log in to the Secure Mobile Access portal.
Configuring a Policy on VASCO IdentiKey
To add a new policy in the VASCO Identikey Web Administration interface:
1
Log in to the Vasco Identikey Web Administration window.
2
Click the Policies tab and select Create.
NOTE:
There are policies available by default, and you can also create new policies to suit
your needs
3
Fill in a policy name and choose the option most suitable in your situation. If you want the policy to
inherit a setting from another policy, choose the inherit option. If you want to copy an existing policy,
choose the copy option, and if you want to make a new policy, choose the create option.
NOTE:
Configure the policy properties to use the appropriate back-end server. This can be
the same authentication service as previously used in the SMA/SRA appliance.
Use the following settings for the policy:
Table 27. Policy settings
Local Auth
Back-End Auth
Dynamic User Registration
Password Autolearn
Stored Password Proxy
Windows Group Check
Registering the SMA/SRA as a VASCO Client
To register the SMA/SRA appliance as a VASCO client:
1
In the Vasco Identikey Web Administration window, click the Clients Tab and choose Register.
2
Select RADIUS Client for Client Type.
Default (DIGIPASS/Password)
Default (None)
Default (No)
Default (No)
Default (No)
Default (No Check)
Dell SonicWALL Secure Mobile Access 8.5
192
Administration Guide
Advertisement
Chapters
Table of Contents
Troubleshooting
