Dell PowerConnect W-7200 Series Reference Manual page 52

aaa authentication vpn
aaa authentication vpn <profile-name>
cert-cn-lookup
clone <source>
default-role <guest>
max-authentication-failures <number>
no ...
server-group <group>
Description
This command configures VPN authentication settings.
Syntax
Parameter
<profile-name>
cert-cn-lookup
clone <source>
default-role <role>
max-authentication-failures
<number>
no
server-group <group>
Usage Guidelines
This command configures VPN authentication settings for VPN, RAP and CAP clients.Use the vpdn group
command to configure Layer-2 Tunneling Protocol and Internet Protocol Security (L2TP/IPsec) or a Point-to-Point
Tunneling Protocol (PPTP) VPN connection. (See
52 | aaa authentication vpn
Description
There are three VPN profiles: default, default-rap or
default-cap.
This allows users to use different AAA servers for VPN,
RAP and CAP clients.
NOTE: The default and default-rap profiles are
configurable. The default-cap profile is not configurable
and is predefined with the default settings.
If you use client certificates for user authentication, enable
this option to verify that the certificate's common name
exists in the server. This parameter is enabled by default in
the default-cap and default-rap VPN profiles, and disabled
by default on all other VPN profiles.
Copies data from another VPN authentication profile.
Source is the profile name from which the data is copied.
Role assigned to the VPN user upon login.
NOTE: This parameter requires the Policy Enforcement
Firewall for VPN Users (PEFV) license.
Maximum number of authentication failures before the user
is blacklisted. The supported range is 1-10 failures. A value
of 0 disables blacklisting.
NOTE: This parameter requires the RFProtect license.
Negates any configured parameter.
Name of the group of servers used to authenticate VPN
users. See "aaa server-group" on page
"vpdn group l2tp" on page
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Default
—
—
—
guest
0 (disabled)
—
internal
82.
1456.)