Cisco Systems RVL200 Network Router User Manual


 
Chapter 4
Advanced Configuration
41
4-Port SSL/IPSec VPN Router
Generate New Certificate Click this option to generate
a new certificate. It will replace the Router’s existing
certificate.
Export Certificate for Administration The certificate for
administration holds the private key and should be stored
in a safe place as a backup. Select this option to store your
administration certificate as a file. The default filename is
RVL200_MMDD_HHMM.pem, which you can rename.
Follow the on-screen instructions to select the location
where you want to store your certificate. If you reset the
Router to its factory defaults, then you can import the
certificate and restore it on the Router.
Export Certificate for Client Select this option to store
your client certificate as a file. The default filename is
RVL200_MMDD_HHMM_Client.pem, which you can
rename. Follow the on-screen instructions to select the
location where you want to store your certificate.
Import Certificate Specify where your certificate
(X.509 certificate in a .pem file) is located. (This is the
file you previously saved using the Export Certificate for
Administration option.) Click Browse and follow the on-
screen instructions. After you have selected the file, click
Import.
Existing Certificate The filename of the current certificate
is displayed.
SSL VPN > User Management
Define users for your SSL VPN tunnels.
SSL VPN > User Management
User Management
Edit Group
Authentication Type
Select the type you want to use: Local User Database,
RADIUS - PAP, RADIUS - CHAP, RADIUS - MSCHAP,
RADIUS - MSCHAPV2, NT Domain, Active Directory,
or LDAP. Follow the instructions for the type you want to
use.
Local User Database
Proceed to the “Edit User” section.
RADIUS - PAP, RADIUS - CHAP, RADIUS - MSCHAP, or
RADIUS - MSCHAPV2
RADIUS - PAP
RADIUS Server Address Enter the IP address or domain
name of the RADIUS server.
Secret Password If required by the RADIUS server, enter
an authentication secret password.
Proceed to the “Edit User” section.
NT Domain
NT Domain
NT Server Address Enter the IP address or domain name
of the server. (The Router does support Linux Samba
Server Authentication.)
NT Domain Name Enter the NT authentication domain.
This is the domain name configured on the Windows
authentication server or Linux Samba authentication
server for network authentication.
Proceed to the “Edit User” section.
Active Directory
Active Directory
Server Address Enter the IP address or domain name of
the Active Directory server.
Active Directory Domain Enter the Active Directory
domain name.