Netgear UTM150 – ProSECURE Unified Threat Management (UTM) Appliance 사용자 설명서
Configure VPN Tunnels
33
NETGEAR ProSAFE VPN Client
When an end user opens a tunnel, a pop-up window opens and the end user must enter the
XAUTH user name (login) and password. In a multiple VPN tunnel configuration, the name of
the VPN tunnel displays in the pop-up window. The credentials must match those on the
remote VPN gateway. If XAUTH authentication fails, the tunnel establishment fails too.
XAUTH user name (login) and password. In a multiple VPN tunnel configuration, the name of
the VPN tunnel displays in the pop-up window. The credentials must match those on the
remote VPN gateway. If XAUTH authentication fails, the tunnel establishment fails too.
The end user is allowed some time to enter the credentials. If the time expires, a warning
displays and the end user must reopen the VPN tunnel. The expiration time depends on the
settings of the X-Auth timeout field on the Parameters pane of the Connection Panel (see
displays and the end user must reopen the VPN tunnel. The expiration time depends on the
settings of the X-Auth timeout field on the Parameters pane of the Connection Panel (see
).
The way that credentials are verified depends on the VPN gateway. When a VPN gateway
detects an incorrect login name or password, one of the following actions can occur:
detects an incorrect login name or password, one of the following actions can occur:
•
The XAUTH page displays again.
•
A pop-up warning alerts the user to try to open the VPN tunnel again.
To configure XAUTH:
1.
On the client computer desktop, double-click the VPN Client shortcut
.
The VPN Configuration page displays.
2.
In the VPN Tunnel Tree pane, right-click the name of the IKE configuration.
The Authentication page displays.
3.
Click the Advanced tab.
4.
Select the X-Auth Popup check box.
Note:
NETGEAR recommends that you do not complete the Login and
Password fields on this page. Leave these fields blank so that the
VPN Client user enters these credentials. This method is referred to as
dynamic extended authentication.
Password fields on this page. Leave these fields blank so that the
VPN Client user enters these credentials. This method is referred to as
dynamic extended authentication.
If you enter a name in the Login field and a password in the Password field, the pop-up
window does not open, and the tunnel is established if the credentials match those on the
window does not open, and the tunnel is established if the credentials match those on the