Table of Contents
Advertisement
NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual
5. Enter the Kerberos or Active Directory domain name in the Kerberos Domain field.
6. Enter the name of the layout in the Portal Layout Name field. The default layout is SSL-VPN.
(Additional layouts may be defined from the SSL VPN Portal > Portal Layouts screen.)
Note: If you selected a portal layout other than SSL-VPN, then the domain will not
be displayed on the default login page. Users will need to log in at
https://<IP/Domain Name>/portal/<Portal Name>.
7. Click Apply. Once the domain has been added, the domain will be added to the Domains
table.
Troubleshooting Active Directory Authentication
If your users are unable to connect via Active Directory, verify the following:
1. The time settings between the Active Directory server and the SSL VPN Concentrator must be
synchronized. Kerberos authentication, used by Active Directory to authenticate clients,
permits a maximum of a 15-minute time difference between the Windows server and the client
(the SSL VPN Concentrator). The easiest way to solve this issue is to configure Network Time
Protocol on the Date and Time screen and check that the server's time settings are also
correct.
2. Confirm that your Windows server is configured for Active Directory authentication using
Kerberos. If you are using a Window NT 4.0 server, then your server only supports NT
Domain authentication. Typically, Windows 2000 and 2003 servers are also configured for NT
Domain authentication to support legacy Windows clients.
Deleting a Domain
To delete a domain, click the Delete link in the Domains table for the domain you wish to remove.
Once the SSL VPN Concentrator has been updated, the deleted domain will no longer appear in
the table in the Domains table.
Note: The SSL VPN Concentrator "geardomain" domain cannot be deleted.
3-12
v2.1, November 2008
Authenticating Users
Advertisement
Table of Contents
