Checking The Configuration; Managing Ssl Vpn Users - Huawei AR1200 series Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
By default, the basic SSL VPN functions are disabled.
----End

7.3.6 Checking the Configuration

After the configurations of basic SSL VPN functions are complete, you can verify the
configurations.
Procedure
l
----End

7.4 Managing SSL VPN Users

The user management functions include configuring user information, maximum number of
online users, and maximum online duration of users, and forcibly disconnecting users.
Applicable Environment
User management functions include:
l
l
l
l
Issue 01 (2012-04-20)
Run the display sslvpn gateway [ gateway-name ] command to check the virtual gateway
configurations.
Configuring user information
To log in to virtual gateways, each authorized user needs a user name and a password. All
the user names and passwords of the locally authenticated users are stored on virtual
gateways. After a user enters the user name and password, the virtual gateway checks
whether they are identical with the locally stored user name and password of this user. If
they are identical, the virtual gateway allows the user to log in.
NOTE
On a configuration terminal, only one user can log in to a virtual gateway.
Configuring the maximum number of online users
An administrator can limit the number of online users. When the number of online users
on the virtual gateway exceeds the limit, no more user can log in.
NOTE
The number of online SSL VPN users supported by the AR1200 is limited by the license. The number
of online SSL VPN users that each license support depends on the license level. The AR1200 supports
a maximum of two online SSL VPN users without a license. To enable the AR1200 to support more
online SSL VPN users, buy licenses from Huawei local office.
Configuring the maximum online duration of users
If an online user does not use services for a long time, the user still occupies resources. To
avoid a waste of resources, configure the maximum online duration for users. A user whose
online duration exceeds the limit is logged off forcibly. The virtual gateway still stores
information about the disconnected users.
Forcibly disconnecting users from virtual gateways
An administrator can disconnect a user by specifying the user's name or ID or disconnect
all users from a virtual gateway. The virtual gateway still stores information about the
disconnected users.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 SSL VPN Configuration
370