Nortel 3050 Command Reference Manual page 239

Table 83
Group Menu Options (/cfg/vpn/aaa/group) (cont'd.)
Command Syntax and Usage
access
print
Copyright © 2007 Nortel Networks
.
/cfg/vpn <id> /aaa/group <id> Group Configuration 239
•
NTLM: The group name must correspond to an existing group
name in the Windows domain to which the user belongs. The most
common examples of Windows domains to which a user belongs
are "Domain Users", "Administrators", "Power Users" or "Guests".
Note that these domains are different than User or Resource
domains (i.e. commonly domains that users log in to). Contact your
Windows system administrator for more information.
•
SiteMinder: The group name must correspond to an existing
group name defined in the SiteMinder group attribute used by the
SiteMinder server. Contact your SiteMinder system administrator
for information.
•
RSA SecurID. The group name must correspond to a group name
defined for the RSA SecurID authentication method using the
/cfg/vpn #/aaa/auth #/rsa/rsagroup command.
•
RSA ClearTrust. The group name must correspond to a group name
defined for the RSA ClearTrust authentication method on any of the
ClearTrust authorization servers.
•
Client certificate: The group name must correspond to a group
name defined as a group OID value in the client certificate (see the
/cfg/vpn #/aaa/auth #/cert/groupoids command) or to a
group name mapped to a CA certificate (see the /cfg/vpn #/aaa/
auth #/cert/cacerts command).
•
Local database: Any name can be used. The group name is only
used internally for controlling access to intranet resources through
the associated access rules. When adding a user to the local
database, you map the user to one or more of the defined user
access groups.
Note: After you have assigned a name to the user access group,
you must also define the access rules associated with the group.
This must be done regardless of the authentication mechanism(s)
that is used in the VPN.
Displays the Access Rule menu. To view menu options, see
"/cfg/vpn <id> /aaa/group <id> /access <rule number>
Access Rule Configuration" (page
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
246).