Step 2; Setting The Time; Setting Dns And The Default Route; Setting Netextender Client Address Range And Route - Dell SonicWall SRA 4200 Administrator's Manual

Note This configuration procedure is specific to VASCO IdentiKey version 3.2. If you are using a
different version of VASCO IdentiKey, the procedure will be slightly different.
If you will be using RSA instead of VASCO, see
on page

Setting the Time

The DIGIPASS token is based on time synchronization. Since the two-factor authentication
depends on time synchronization, it is important that the internal clocks for the SRA appliance
and the VASCO IdentiKey are set correctly.
Navigate to System > Time on the SRA appliance to select the correct time zone.

Setting DNS and the Default Route

The default route for the SRA appliance is an interface on the firewall that corresponds with the
DMZ Zone. The IP address of this firewall DMZ interface needs to be configured as the default
route for the SRA appliance.
To configure Domain Name Service and the default route:
On the SRA management interface, navigate to Network > DNS and set the correct DNS
Step 1
settings and/ or WINS Settings.
Navigate to Network > Routes and set the correct Default Route for the SRA X0 interface.

Step 2

Setting NetExtender Client Address Range and Route

To configure the NetExtender client address range and route on the SRA appliance:
Navigate to NetExtender > Client Addresses to set the NetExtender Client Address Range.
Step 1
Client Addresses will be assigned in the same subnet of the SRA X0 interface. Exclude the SRA
appliance X0 interface and the firewall DMZ interface IP address.
Navigate to NetExtender > Client Routes.
Step 2
Click the Add Client Route button to select the correct Client Routes for the authenticated
remote users accessing the private networks via the SRA connection.
The client route corresponds with the subnet connected to the X0 (LAN) interface of the Dell
SonicWALL NSA or TZ firewall.

Creating a Portal Domain with RADIUS Authentication

To create a domain using RADIUS authentication on the SRA appliance:
Navigate to Portal > Domains and click Add Domain.
Step 1
Select Radius from the Authentication Type drop-down list.
Step 2
Enter the Domain Name that users will use in order to log into the SRA appliance portal.
Step 3
168 | SRA 6.0 Administrator's Guide
163.
"Configuring the RSA Authentication Manager"