Nortel 3050 Command Reference Manual page 245

Table 83
Group Menu Options (/cfg/vpn/aaa/group) (cont'd.)
Command Syntax and Usage
netdirect on|off
ippool <ip pool number>
Copyright © 2007 Nortel Networks
.
/cfg/vpn <id> /aaa/group <id> Group Configuration 245
Note: When citrix is set to on, the NVG supports rewrite of ICA files
only. Other methods are possible but may require configuration changes
on the Citrix Metaframe server side.
The default setting is off.
This command is only visible if Net Direct support has been delegated
to group level, i.e. the /cfg/vpn #/sslclient/netdirect
command has been set to group.
•
on: When members of the current group logs in to the Portal, Net
Direct will be enabled. To activate Net Direct, the remote user can
for example click the Net Direct link on the Portal. This gives the
user the possibility to start a native client application (for example
Outlook Express) and connect to a remote host through a secure
SSL connection.
•
off: Net Direct will not be enabled for members of the current user
group.
If the user belongs to several groups, Net Direct will be enabled if it is
enabled for any of the user's different groups.
The default setting is off.
Lets you reference a previously created IP pool number. The settings
made for this IP pool will apply when a member of the current group
logs in to the VPN.
The IP pool comes into play when a remote user tries to establish a
connection using the Nortel IPsec VPN client (formerly the Contivity
VPN client) or the Net Direct client. A new source IP address has to
be assigned to the unencrypted connection between the NVG and the
requested resource and the IP pool settings determine whether the IP
address is assigned from a local pool of IP addresses, from an external
RADIUS server or from an external DHCP server.
The IP pool is configured with the /cfg/vpn #/ippool command (see
"/cfg/vpn <id> /ippool <id> IP Pool Configuration" (page
If no IP pool is assigned to the group, the default IP pool will be used
(configured under /cfg/vpn #/aaa/defippool).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
317)).