User's Manual

158 | Onboard Dell Networking W-ClearPass Guest 6.4 | User Guide
b. If you choose the IKEv2 protocol, you can specify the following authentication types. For VIA
deployments that use IKEv2, the VPN server always uses a certificate for IKEv2 authentication phase.
However, the devices can use certificates, EAP-MSCHAPv2, or EAP-TLS
n Certificate
n EAP-TLS
n EAP-MSCHAPv2
8. Enter the Internal IP address assigned to the controller.
9. In the DNS Suffix field, enter the DNS domain name for the resolution of the internal resources.
10.If you select the Enable Split Tunneling option, all the traffic to the VIA tunneled networks goes through
the controller and the rest is bridged directly on the device. You must specify the addresses and netmask to
which data will be tunneled through VIA when you enable this option.
11.If you enable the Enable VPN on Demand option, the VPN connection will be automatically established
when accessing certain domains. You must specify the domain names and the on-demand action that need
to be applied to these domains when you enable this option.
12.To configure the advanced settings for VIA, check the option Show Advanced Settings and select the
appropriate values.
13.You can specify a proxy server to use when the VPN connection is active. In the Proxy Settings area of the
form, choose one of the following options from the Proxy Setup drop-down list:
l None – No proxy server will be configured with this VPN profile.
l Manual – A proxy server will be configured with this VPN profile. Specify the proxy server settings in the
Server and Port fields.
l If authentication is required to access this proxy, you may specify the username and password using the
Authentication and Password text fields. The minimum password length is six characters.
l Automatic – The proxy server will be automatically configured with this VPN profile. Specify the
location of a proxy auto-config file in the Proxy Server URL text
14.Click Save Changes. The VPN configuration is available as a configuration unit on the Configuration
Profile form.
For more information about configuration profiles, see "Configuration Profiles" on page 165
Configuring an iOS Device L2TP, PPTP, or IPSec Connection
You can use VPN settings when you have deployed a VPN infrastructure and want to automatically provide the
secure connection settings to users at the time of device provisioning.
To configure the L2TP, PPTP, or IPSec VPN settings:
1. Go to Onboard > Configuration > iOS Settings. Either click a VPN setting's name in the list; or click Add
New, select VPN Settings in the Settings Type drop-down list, and click Create. The VPN Settings form
opens.