beautypg.com

Configuring the combination authentication policy, Overview, Configuration procedure – H3C Technologies H3C SecBlade SSL VPN Cards User Manual

Page 71

background image

63

Item Action

AD Server Address List

Required
Specify the AD server address list, which can contain multiple addresses,

separated with semicolons (;).

Administrator’s Account

Required
Specify the administrator’s account to be bound to the AD server, namely, the

administrator's CN.

Password

Required
Password of the administrator’s account.

Confirm Password

Required
Type the password again.

Username format

Required
Specify the format of the username for logging into the AD server, that is,

whether to exclude the AD domain name from the username.

Authentication Method

Optional
Specify the certificate policy for users using the AD authentication method.

Enable Authentication

Optional
Select to enable AD authentication.

Server failure restoring time

Required
Specify the waiting time before restarting the AD service after it fails

NOTE:

For Administrator’s Account, you can type the default administrator account administrator of the AD
domain, or type any account in the user group users.

Configuring the Combination Authentication Policy

Overview

An combination authentication policy can combine any two of the four authentication policies (local
authentication, RADIUS authentication, LDAP authentication, AD authentication) in any order. You can

specify whether a user needs to input the password for the second authentication after the user passes the

first authentication.

Configuration Procedure

Select the Combination Authentication tab to enter the combination authentication policy configuration

page shown in

Figure 48

.