Users And Authentication; Setting Authentication Time Out; Adding User Names And Configuring Authentication - D-Link D DFL-500 DFL-500 Manual

Users and authentication

DFL-500 NPGs support user authentication to the DFL-500 user database or to a RADIUS server. You can
add user names to the DFL-500 user database and then add a password to allow the user to authenticate
using the internal database. You can also add the name of a RADIUS server and select RADIUS to allow the
user to authenticate using the selected RADIUS server. You can also disable users so that they cannot
authenticate with the DFL-500 NPG.
To enable authentication, you must add user names to one or more user groups. You can also add RADIUS
servers to user groups. You can then select a user group when you require authentication.
You can require authentication for:
•
any firewall policy with Action set to ACCEPT (see
NAT/Route mode
•
IPSec dialup remote gateways (see
•
PPTP (see PPTP VPN
•
L2TP (see L2TP VPN
When a user enters a user name and password, the DFL-500 NPG searches the internal user database for a
matching user name. If Disable is selected for that user name, the user cannot authenticate and the
connection is dropped. If Password is selected for that user and the password matches, the connection is
allowed. If the password does not match, the connection is dropped.
If RADIUS is selected and RADIUS support is configured and the user name and password match a user
name and password on the RADIUS server, the connection is allowed. If the user name and password do not
match a user name and password on the RADIUS server, the connection is dropped.
This chapter describes:
•

Setting authentication time out

•

Adding user names and configuring authentication

•
Configuring RADIUS support
•
Configuring user groups
Setting authentication time out
To set authentication time out using the web-based manager:
•
Go to System > Config > Options .
•
Set Auth Timeout to control how long authenticated firewall connections can remain idle before users
must authenticate again to get access through the firewall.
The default authentication time out is 15 minutes.
Adding user names and configuring authentication
Use the following procedures to add user names and configure authentication.
This section describes:
•
Adding user names and configuring authentication
•
Deleting user names from the internal database
Adding user names and configuring authentication
•
Go to User > Local .
DFL-500 User Manual
policies)
Adding a remote
configuration)
configuration)
Adding NAT/Route mode policies
gateway)
and Adding
43