Users Guide

160 | Remote Access Points Dell PowerConnect ArubaOS 5.0 | User Guide
c. For Destination, select any.
d. For Service, select service, then select svc-tftp.
e. Click Add.
10. To create the next rule:
a. Under Rules, click Add.
b. For Source, select any.
c. For Destination, select any.
d. For Service, select service, then select svc-ftp.
e. Click Add.
11. Click Apply.
12. Click the User Roles tab.
a. Click Add.
b. Enter the Role Name (for example, rap_role).
c. Click Add under Firewall Policies.
d. In the Choose from Configured Policies menu, select the policy you just created.
e. Click Done.
13. Click Apply.
Configure VPN authentication using the internal database
1. Navigate to the Configuration > Security > Authentication > L3 Authentication page.
2. In the Profiles list, select VPN Authentication Profile.
3. For Default Role, enter the user role you created previously (for example, rap_role).
4. Click Apply.
5. In the Profile list, under VPN Authentication Profile, select Server Group.
6. Select the internal server group from the drop-down menu.
7. Click Apply.
Add the user to the internal database
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select Internal DB.
3. Click Add User in the Users section. The user configuration page displays.
4. Enter the user name and password.
5. Click Enabled to activate this entry on creation.
6. Click Apply to apply the configuration. Note that the configuration does not take effect until you perform this
step.
7. At the Servers page, click Apply.
Using CLI to configure the internal DB for a RAP user
ip access-list session rap_policy
any any svc-papi permit
any any svc-l2tp permit
any any svc-gre permit
any any svc-esp permit
any any svc-tftp permit
any any svc-ftp permit