NETGEAR SSL312 - ProSafe SSL VPN Concentrator 25 Bedienungsanleitung

202-10208-01

August 2006

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

NETGEAR ProSafe SSL

VPN Concentrator 25

SSL312 Reference

Manual

v1.0, August 2006

Technical Support

Please register to obtain technical support. Please retain your proof of purchase and warranty information.

To register your product, get product support or obtain product information and product documentation, go to

http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling

out the registration card and mailing it to NETGEAR customer service.

You will find technical support information at: http://www.NETGEAR.com/ through the customer service area. If you

want to contact technical support by telephone, see the support information card for the correct telephone number for

your country.

Trademarks

NETGEAR, the NETGEAR logo, ProSafe and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this

document are copyright Intoto, Inc.

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

FCC Statement

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause undesired operation.

FCC Requirements for Operation in the United States

Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply

with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide

reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can

radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful

interference to radio communications. However, there is no guarantee that interference will not occur in a particular

installation. If this equipment does cause harmful interference to radio or television reception, which can be determined

by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the

following measures:

• Reorient or relocate the receiving antenna

• Increase the separation between the equipment and receiver

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected

• Consult the dealer or an experienced radio/TV technician for help.

v1.0, August 2006

iii

RF Exposure Warning for North America, and Australia

Warning! To ensure compliance with FCC RF exposure requirements, the antenna used for this device must be installed

to provide a separation distance of at least 20 cm (8 in) from all persons and must not be co-located or operating in

conjunction with any other antenna or radio transmitter. Installers and end-users must follow the installation instructions

provided in this user guide.

EU Regulatory Compliance Statement

ProSafe SSL VPN Concentrator 25 is compliant with the following EU Council Directives: 89/336/EEC and

LVD 73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class B, EN55024 and

EN60950.

Certificate of the Manufacturer/Importer

It is hereby certified that the ProSafe SSL VPN Concentrator 25 has been suppressed in accordance with the conditions

set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test

transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes

in the operating instructions.

The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market

and has been granted the right to test the series for compliance with the regulations.

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß dasProSafe SSL VPN Concentrator 25 gemäß der im BMPT-AmtsblVfg 243/1991 und

Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender)

kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt

gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Product and Publication Details

Model Number: SSL312

Publication Date: August 2006

Product Family: Concentrator

Product Name: ProSafe SSL VPN Concentrator 25

Home or Business Product: Business

Language: English

Publication Part Number: 202-10208-01

Publication Version Number: 1.0

v1.0, August 2006

Contents

About This Manual

Conventions, Formats and Scope .................................................................................... ix

How to Use This Manual ...................................................................................................x

How to Print this Manual ....................................................................................................x

Chapter 1

Introduction

About the ProSafe SSL VPN Concentrator 25 ...............................................................1-1

Key Features ..................................................................................................................1-1

Web Browser Requirements ...........................................................................................1-2

What’s in the Box ............................................................................................................1-3

Hardware Description .....................................................................................................1-3

Front Panel ...............................................................................................................1-3

Back Panel ...............................................................................................................1-4

Chapter 2

Basic Installation and Configuration

Installing the SSL VPN Concentrator .............................................................................2-1

Configuring the ProSafe SSL VPN Concentrator 25 ......................................................2-2

Logging in to the Management Interface ........................................................................2-4

Chapter 3

Status and Logging

SSL VPN Concentrator Status ........................................................................................3-1

Event Log .......................................................................................................................3-3

Active Users ...................................................................................................................3-5

Log Settings ....................................................................................................................3-6

Chapter 4

General Settings

System Configuration Utilities .........................................................................................4-1

Encrypting the Configuration File .............................................................................4-2

Exporting and Saving a Backup Configuration File ..................................................4-2

v1.0, August 2006

Importing a Configuration File ..................................................................................4-3

Erasing and Restoring the Default Settings .............................................................4-4

Upgrading the SSL VPN Concentrator Firmware .....................................................4-4

Time and Date Settings ..................................................................................................4-5

Certificate Management .................................................................................................4-7

Chapter 5

Network Settings

Configuring Network Settings .........................................................................................5-1

Sample SSL VPN Concentrator Configuration .........................................................5-1

Network Interface Configuration ...............................................................................5-2

Network Route Configuration ...................................................................................5-4

Network Host Table Settings ....................................................................................5-6

Configuring DNS Settings ........................................................................................5-7

Chapter 6

Group and User Access Policies

Users, Groups and Global Policies .................................................................................6-1

Global Policies ................................................................................................................6-3

Editing Global Policy Settings ..................................................................................6-3

Adding and Editing Global Policies ..........................................................................6-4

Defining and Editing Global Bookmarks ...................................................................6-6

Groups Configuration .....................................................................................................6-6

Adding a New Group ................................................................................................6-7

Editing Group Settings .............................................................................................6-8

Defining and Editing Group Policies .........................................................................6-9

Defining and Editing Group Bookmarks .................................................................6-11

Deleting a Group ....................................................................................................6-12

Users Configuration ......................................................................................................6-13

Adding a New User ................................................................................................6-14

Editing a User .........................................................................................................6-15

Defining and Editing User Policies .........................................................................6-17

Defining and Editing a User Bookmarks ................................................................6-18

Deleting a User ......................................................................................................6-19

Active Directory Authentication Servers for Group Policies and Bookmarks ................6-19

LDAP Authentication Domains for Group Policies and Bookmarks ..............................6-20

Sample LDAP Attributes ........................................................................................6-20

vii

v1.0, August 2006

LDAP Attribute Rules .............................................................................................6-21

Sample LDAP Users and Attributes Settings .........................................................6-21

Querying an LDAP Server ......................................................................................6-21

NT and RADIUS Domain Servers for Group Policies and Bookmarks .........................6-22

Chapter 7

Domains and Layouts

Authentication Domains ..................................................................................................7-1

Local User Database Authentication ........................................................................7-2

RADIUS Authentication ............................................................................................7-3

NT Domain Authentication .......................................................................................7-4

LDAP Authentication ................................................................................................7-5

Active Directory Authentication ................................................................................7-7

Deleting a Domain ....................................................................................................7-9

SSL VPN Concentrator Portal Layouts ...........................................................................7-9

Adding Portal Layouts ............................................................................................7-10

Customizing the Banner .........................................................................................7-13

Duplicating and Editing Portal Layouts ..................................................................7-14

Advanced Portal Page Layout Specifications ...............................................................7-16

Chapter 8

Network Resources

Chapter 9

VPN Tunnel Client

SSL VPN Client Configuration ........................................................................................9-1

Adding IP Address Ranges ............................................................................................9-2

Adding Routes for VPN Tunnel Clients ...........................................................................9-3

Chapter 10

Port Forwarding

Configuring Applications for Port Forwarding ...............................................................10-1

Configuring Host Name Resolution ..............................................................................10-3

Appendix A

Default Settings and Technical Specifications

Factory Default Settings ................................................................................................ A-1

Technical Specifications ................................................................................................. A-2

viii

v1.0, August 2006

Appendix B

Related Documents

Index

v1.0, August 2006

About This Manual

The NETGEAR®Prosafe™ SSL VPN Concentrator 25 SSL312 Reference Manual describes how

to install, configure and troubleshoot the ProSafe SSL VPN Concentrator 25. The information in

this manual is intended for readers with intermediate computer and Internet skills.

Conventions, Formats and Scope

The conventions, formats, and scope of this manual are described in the following paragraphs:

•Typographical Conventions. This manual uses the following typographical conventions:

•Formats. This manual uses the following formats to highlight special messages:

Italics Emphasis, books, CDs, URL names

Bold User input

Fixed Screen text, file and server names, extensions, commands, IP addresses

Note: This format is used to highlight information of importance or special interest.

Tip: This format is used to highlight a procedure that will save time or resources.

Warning: Ignoring this type of note may result in a malfunction or damage to the

equipment.

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

v1.0, August 2006

•Scope. This manual is written for the SSL VPN Concentrator according to these

specifications:

For more information about network, Internet, firewall, and VPN technologies, see the links to the

NETGEAR website in Appendix B, “Related Documents”.

How to Use This Manual

The HTML version of this manual includes the following:

• Buttons, and , for browsing forwards or backwards through the manual one page

at a time

•A button that displays the table of contents and an button. Double-click on a

link in the table of contents or index to navigate directly to where the topic is described in the

manual.

•A button to access the full NETGEAR, Inc. online knowledge base for the product

model.

• Links to PDF versions of the full manual and individual chapters.

How to Print this Manual

To print this manual you can choose one of the following several options, according to your needs.

•Printing a Page in the HTML View.

Danger: This is a safety warning. Failure to take heed of this notice may result in

personal injury or death.

Product Version ProSafe SSL VPN Concentrator 25

Manual Publication Date August 2006

Note: Product updates are available on the NETGEAR, Inc. website at

http://kbserver.netgear.com/products/SSL312.asp.

Andere Handbücher für SSL312 - ProSafe SSL VPN Concentrator 25

Inhaltsverzeichnis

Andere NETGEAR Drahtloser Zugangspunkt Handbücher

NETGEAR

NETGEAR ProSAFE WNDAP380R Bedienungsanleitung

NETGEAR

NETGEAR WNTR2001 Bedienungsanleitung

NETGEAR

NETGEAR WN802T Bedienungsanleitung

NETGEAR

NETGEAR FWG114Pv2 - Wireless Firewall With USB Print... Bedienungsanleitung

NETGEAR

NETGEAR WG302 - 802.11g ProSafe Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR WAC510 Bedienungsanleitung

NETGEAR

NETGEAR WNDAP350 - ProSafe 802.11n Dual Band Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR Orbi RBE970B Bedienungsanleitung

NETGEAR

NETGEAR WAG102 - ProSafe Dual Band Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR ProSafe Premium WNDAP620 Bedienungsanleitung

NETGEAR

NETGEAR WAX204 Bedienungsanleitung

NETGEAR

NETGEAR WAG302v1 - ProSafe Dual Band Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR Orbi Pro Satellite Bedienungsanleitung

NETGEAR

NETGEAR WN802Tv2 - Wireless-N Access Point Bedienungsanleitung

NETGEAR

NETGEAR ProSAFE WN203-200PES Bedienungsanleitung

NETGEAR

NETGEAR WG602v2 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR WN802T Bedienungsanleitung

NETGEAR

NETGEAR WAG302 - ProSafe Dual Band Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR ME102 - Wireless Access Point Bedienungsanleitung

NETGEAR

NETGEAR WAC104 Bedienungsanleitung

NETGEAR

NETGEAR WG302 - 802.11g ProSafe Wireless Access... Bedienungsanleitung

NETGEAR

NETGEAR WAC510 Bedienungsanleitung

NETGEAR

NETGEAR WAX206 Bedienungsanleitung

NETGEAR

NETGEAR ProSAFE WNDAP380R Bedienungsanleitung

Beliebte Drahtloser Zugangspunkt Handbücher anderer Marken

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Bedienungsanleitung

Ubiquiti

Ubiquiti NanoStation NSM2 Bedienungsanleitung

Cisco

Cisco Aironet 1550 Series Bedienungsanleitung

Aruba

Aruba IAP-335 Bedienungsanleitung

Advantek Networks

Advantek Networks AWN-AP-54MR Bedienungsanleitung

IP-COM

IP-COM AP355 Bedienungsanleitung

Buffalo

Buffalo AirStation WLA-L11G Bedienungsanleitung

EnGenius

EnGenius EnStationACv2 Bedienungsanleitung

D-Link

D-Link DAP-3662 Bedienungsanleitung

xG Technology

xG Technology xMax CN1300 Bedienungsanleitung

Widelink

Widelink ezWave WAP-1100 Series Bedienungsanleitung

Edimax

Edimax CAP1200 Bedienungsanleitung

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Bedienungsanleitung

Aruba

Aruba AP-203R Bedienungsanleitung

LuXout Shades

LuXout Shades LUXSHADE MOTION Bedienungsanleitung

CreatComm

CreatComm TB5F Bedienungsanleitung

SineDigital

SineDigital MW-1500AP(H) Bedienungsanleitung

TP-Link

TP-Link AP9650 V1 Bedienungsanleitung