Nortel 3050 Command Reference Manual page 169

Table 48
AAA Menu Options (/cfg/vpn/aaa) (cont'd.)
Command Syntax and Usage
defippool <ip pool number>
ssodomains
ssoheaders
radacct
Copyright © 2007 Nortel Networks
.
Lets you reference a previously created user group. Anybody who tries to
access a resource through the Portal without prior authentication will be
assigned to this group. The access rules of the referenced group determine
if access to the requested resource is allowed or not.
Example: The remote user requests an intranet web page through the
Portal by entering https://vpn.example.com/http/accounting.ex
ample.com in the address field, (where vpn.example.com is the Portal
address). According to the access rules of the anonymous group, access is
only allowed to a specific intranet server used for client security tests. Since
access is denied, the Portal's login page is displayed instead.
To create a user group with access rules, use the /cfg/vpn
#/aaa/group command.
Lets you reference a previously created IP pool number. This IP pool will be
the default IP pool for the VPN, that is . its settings will be used when no IP
pool is specified for a specific user group in the VPN.
The IP pool governs how IP addresses and network attributes are assigned
to IPsec VPN client connections and Net Direct client connections.
For more information about IP pools, see
IP Pool Configuration" (page
Displays the SSO (Single-Sign-On) Domains menu. To view menu options,
see "/cfg/vpn <id> /aaa/ssodomains Single-Sign-On Domain
Configuration" (page 255).
Displays the SSO (Single-Sign-On) Headers menu. To view menu options,
see " /cfg/vpn <id> /aaa/ssoheaders Single-Sign-On Headers
Configuration" (page 257).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
/cfg/vpn <id> /aaa AAA Configuration 169
"/cfg/vpn <id> /ippool <id>
317).