HP VPN Firewall Appliances VPN Configuration Guide

343
Item Descri
p
tion
Enable public
account
Select this item to set the local user account as a public account. A public account can
be concurrently used by multiple users to log in to the SSL VPN system.
If you do not select this item, only one user can use the local user account to log in to the
SSL VPN system at a time.
Max Number
of Users
Set the maximum number of concurrent users that can log in to the SSL VPN system by
using the public account.
The value range depends on the device model. For more information, see Table 44.
User Status Select a user status, Permitted, Permitted When Valid, or Denied.
Expiry Date Set the expiration date for the user when the user status is set to Permitted When Valid.
MAC Address
Specify the MAC addresses to be bound with the
username. The MAC addresses are used for user
identity authentication.
IMPORTANT:
To implement the two functions,
you must also enable the MAC
address binding function in the
domain policy. See "Configure
the domain poli
cy."
Enable MAC
address
learning
Select this item to enable MAC address learning.
With this function enabled, when a user uses this
user account to log in, the SSL VPN system
automatically learns the MAC address of the user
host and records the MAC address for the account.
The SSL VPN can record up to three MAC addresses
for an account. The recorded MAC addresses are
still effective after you disable the MAC address
learning function.
Selected User
Groups
Specify the user groups to which the local user belongs.
Available User
Groups
Table 44 Value range for the Max Number of Users field
Hardware Value ran
g
e
F1000-A-EI/F1000-S-EI 1 to 100
F1000-E 1 to 200
F5000 SSL VPN not supported
F5000-S/F5000-C 1 to 200
VPN Firewall Module SSL VPN not supported
20-Gbps VPN firewall modules SSL VPN not supported
2. Import local users in bulk:
a. Select VPN > SSL VPN > User Management > Batch Import from the navigation tree.
The batch import page appears, as shown in Figure 247.
b. Cli
ck Browse to locate the local file that saves the user information.
c. Set whether to direct
ly overwrite the file with the same name on the device.
d. Click Apply to import local users into the SSL VPN.