beautypg.com

Amer Networks E5Web GUI User Manual

Page 644

background image

1.

Go to: Network > Interfaces and VPN > SSL > Add > SSL VPN Interface

2.

Now enter:

Specify a suitable name, in this example my_sslvpn_if

Inner IP: sslvpn_inner_ip

Outer Interface: If2

Server IP: sslvpn_server_ip

IP Pool: sslvpn_pool

3.

Click the tab Add Route

4.

Select the If3 interface in the Available list and press the ">>" button to move it into the
Selected list

5.

Click OK

2. Create an Authentication Rule

Command-Line Interface

Device:/> add UserAuthRule

Interface=my_sslvpn_if
AuthSource=Local
LocalUserDB=LocalUserDB
OriginatorIP=all-nets
Agent=PPP
TerminatorIP=sslvpn_server_ip
Name=ssl_login

InControl

Follow the same steps used for the Web Interface below.

Web Interface

1.

Go to: Policies > User Authentication User Authentication Rules > Add > User
Authentication Rule

2.

Now enter:

Name: ssl_login

Agent: L2TP/PPTP/SSL VPN

Authentication Source: Local

Interface: my_sslvpn_if

Originator IP: all-nets (a more specific range is more secure)

Terminator IP: sslvpn_server_ip

3.

Click OK

The new cOS Core configuration should now be deployed.

Chapter 9: VPN

644

This manual is related to the following products: