Managing Users, Authentication, And Certificates; Adding Authentication Domains, Groups, And Users; Creating A Domain - NETGEAR ProSafe FVS336G Reference Manual

Managing Users, Authentication, and Certificates

This chapter contains the following sections:
• "Adding Authentication Domains, Groups, and Users" on page 7-1
• "Managing Certificates" on page 7-8

Adding Authentication Domains, Groups, and Users

You must create name and password accounts for all users who will connect to the VPN firewall.
This includes administrators and SSL VPN clients. Accounts for IPsec VPN clients are only
needed if you have enabled Extended Authentication (XAUTH) in your IPsec VPN configuration.
Users connecting to the VPN firewall must be authenticated before being allowed to access the
VPN firewall or the VPN-protected network. The login window presented to the user requires
three items: a User Name, a Password, and a Domain selection. The Domain determines the
authentication method to be used and, for SSL VPN connections, the portal layout that will be
presented.
Note: IPsec VPN users will always belong to the default domain (geardomain) and are
not assigned to groups.
Except in the case of IPsec VPN users, when you create a user account, you must specify a group.
When you create a group, you must specify a domain. Therefore, you should create any needed
domains first, then groups, then user accounts.

Creating a Domain

The domain determines the authentication method to be used for associated users. For SSL VPN
connections, the domain also determines the portal layout that will be presented, which in turn
determines the network resources to which the associated users will have access.
To create a domain:
1. Select Users > Domains from the main menu. The Domains screen displays.
v1.2, June 2008
Chapter 7
7-1