NETGEAR SSL312 - ProSafe SSL VPN Concentrator 25 Bedienungsanleitung

202-10208-01

August 2006

NETGEAR, Inc.

4500 Great America Parkway

Santa Clara, CA 95054 USA

NETGEAR ProSafe SSL

VPN Concentrator 25

SSL312 Reference

Manual

v1.0, August 2006

Technical Support

Please register to obtain technical support. Please retain your proof of purchase and warranty information.

To register your product, get product support or obtain product information and product documentation, go to

http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling

out the registration card and mailing it to NETGEAR customer service.

You will find technical support information at: http://www.NETGEAR.com/ through the customer service area. If you

want to contact technical support by telephone, see the support information card for the correct telephone number for

your country.

Trademarks

NETGEAR, the NETGEAR logo, ProSafe and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc.

Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this

document are copyright Intoto, Inc.

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to

make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit

layout(s) described herein.

FCC Statement

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause undesired operation.

FCC Requirements for Operation in the United States

Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply

with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide

reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can

radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful

interference to radio communications. However, there is no guarantee that interference will not occur in a particular

installation. If this equipment does cause harmful interference to radio or television reception, which can be determined

by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the

following measures:

• Reorient or relocate the receiving antenna

• Increase the separation between the equipment and receiver

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected

• Consult the dealer or an experienced radio/TV technician for help.

v1.0, August 2006

iii

RF Exposure Warning for North America, and Australia

Warning! To ensure compliance with FCC RF exposure requirements, the antenna used for this device must be installed

to provide a separation distance of at least 20 cm (8 in) from all persons and must not be co-located or operating in

conjunction with any other antenna or radio transmitter. Installers and end-users must follow the installation instructions

provided in this user guide.

EU Regulatory Compliance Statement

ProSafe SSL VPN Concentrator 25 is compliant with the following EU Council Directives: 89/336/EEC and

LVD 73/23/EEC. Compliance is verified by testing to the following standards: EN55022 Class B, EN55024 and

EN60950.

Certificate of the Manufacturer/Importer

It is hereby certified that the ProSafe SSL VPN Concentrator 25 has been suppressed in accordance with the conditions

set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test

transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes

in the operating instructions.

The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market

and has been granted the right to test the series for compliance with the regulations.

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß dasProSafe SSL VPN Concentrator 25 gemäß der im BMPT-AmtsblVfg 243/1991 und

Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender)

kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt

gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Product and Publication Details

Model Number: SSL312

Publication Date: August 2006

Product Family: Concentrator

Product Name: ProSafe SSL VPN Concentrator 25

Home or Business Product: Business

Language: English

Publication Part Number: 202-10208-01

Publication Version Number: 1.0

v1.0, August 2006

Contents

About This Manual

Conventions, Formats and Scope .................................................................................... ix

How to Use This Manual ...................................................................................................x

How to Print this Manual ....................................................................................................x

Chapter 1

Introduction

About the ProSafe SSL VPN Concentrator 25 ...............................................................1-1

Key Features ..................................................................................................................1-1

Web Browser Requirements ...........................................................................................1-2

What’s in the Box ............................................................................................................1-3

Hardware Description .....................................................................................................1-3

Front Panel ...............................................................................................................1-3

Back Panel ...............................................................................................................1-4

Chapter 2

Basic Installation and Configuration

Installing the SSL VPN Concentrator .............................................................................2-1

Configuring the ProSafe SSL VPN Concentrator 25 ......................................................2-2

Logging in to the Management Interface ........................................................................2-4

Chapter 3

Status and Logging

SSL VPN Concentrator Status ........................................................................................3-1

Event Log .......................................................................................................................3-3

Active Users ...................................................................................................................3-5

Log Settings ....................................................................................................................3-6

Chapter 4

General Settings

System Configuration Utilities .........................................................................................4-1

Encrypting the Configuration File .............................................................................4-2

Exporting and Saving a Backup Configuration File ..................................................4-2

v1.0, August 2006

Importing a Configuration File ..................................................................................4-3

Erasing and Restoring the Default Settings .............................................................4-4

Upgrading the SSL VPN Concentrator Firmware .....................................................4-4

Time and Date Settings ..................................................................................................4-5

Certificate Management .................................................................................................4-7

Chapter 5

Network Settings

Configuring Network Settings .........................................................................................5-1

Sample SSL VPN Concentrator Configuration .........................................................5-1

Network Interface Configuration ...............................................................................5-2

Network Route Configuration ...................................................................................5-4

Network Host Table Settings ....................................................................................5-6

Configuring DNS Settings ........................................................................................5-7

Chapter 6

Group and User Access Policies

Users, Groups and Global Policies .................................................................................6-1

Global Policies ................................................................................................................6-3

Editing Global Policy Settings ..................................................................................6-3

Adding and Editing Global Policies ..........................................................................6-4

Defining and Editing Global Bookmarks ...................................................................6-6

Groups Configuration .....................................................................................................6-6

Adding a New Group ................................................................................................6-7

Editing Group Settings .............................................................................................6-8

Defining and Editing Group Policies .........................................................................6-9

Defining and Editing Group Bookmarks .................................................................6-11

Deleting a Group ....................................................................................................6-12

Users Configuration ......................................................................................................6-13

Adding a New User ................................................................................................6-14

Editing a User .........................................................................................................6-15

Defining and Editing User Policies .........................................................................6-17

Defining and Editing a User Bookmarks ................................................................6-18

Deleting a User ......................................................................................................6-19

Active Directory Authentication Servers for Group Policies and Bookmarks ................6-19

LDAP Authentication Domains for Group Policies and Bookmarks ..............................6-20

Sample LDAP Attributes ........................................................................................6-20

vii

v1.0, August 2006

LDAP Attribute Rules .............................................................................................6-21

Sample LDAP Users and Attributes Settings .........................................................6-21

Querying an LDAP Server ......................................................................................6-21

NT and RADIUS Domain Servers for Group Policies and Bookmarks .........................6-22

Chapter 7

Domains and Layouts

Authentication Domains ..................................................................................................7-1

Local User Database Authentication ........................................................................7-2

RADIUS Authentication ............................................................................................7-3

NT Domain Authentication .......................................................................................7-4

LDAP Authentication ................................................................................................7-5

Active Directory Authentication ................................................................................7-7

Deleting a Domain ....................................................................................................7-9

SSL VPN Concentrator Portal Layouts ...........................................................................7-9

Adding Portal Layouts ............................................................................................7-10

Customizing the Banner .........................................................................................7-13

Duplicating and Editing Portal Layouts ..................................................................7-14

Advanced Portal Page Layout Specifications ...............................................................7-16

Chapter 8

Network Resources

Chapter 9

VPN Tunnel Client

SSL VPN Client Configuration ........................................................................................9-1

Adding IP Address Ranges ............................................................................................9-2

Adding Routes for VPN Tunnel Clients ...........................................................................9-3

Chapter 10

Port Forwarding

Configuring Applications for Port Forwarding ...............................................................10-1

Configuring Host Name Resolution ..............................................................................10-3

Appendix A

Default Settings and Technical Specifications

Factory Default Settings ................................................................................................ A-1

Technical Specifications ................................................................................................. A-2

viii

v1.0, August 2006

Appendix B

Beliebte Drahtloser Zugangspunkt Handbücher anderer Marken

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Bedienungsanleitung

Ubiquiti

Ubiquiti NanoStation NSM2 Bedienungsanleitung

Cisco

Cisco Aironet 1550 Series Bedienungsanleitung

Aruba

Aruba IAP-335 Bedienungsanleitung

Advantek Networks

Advantek Networks AWN-AP-54MR Bedienungsanleitung

IP-COM

IP-COM AP355 Bedienungsanleitung

Buffalo

Buffalo AirStation WLA-L11G Bedienungsanleitung

EnGenius

EnGenius EnStationACv2 Bedienungsanleitung

D-Link

D-Link DAP-3662 Bedienungsanleitung

Widelink

Widelink ezWave WAP-1100 Series Bedienungsanleitung

Edimax

Edimax CAP1200 Bedienungsanleitung

xG Technology

xG Technology xMax CN1300 Bedienungsanleitung

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Bedienungsanleitung

Aruba

Aruba AP-203R Bedienungsanleitung

LuXout Shades

LuXout Shades LUXSHADE MOTION Bedienungsanleitung

CreatComm

CreatComm TB5F Bedienungsanleitung

SineDigital

SineDigital MW-1500AP(H) Bedienungsanleitung

TP-Link

TP-Link AP9650 V1 Bedienungsanleitung