5.1

20 In Search Filter, type the filter values by which you want to limit the search.
The search filter format is attribute operator value.
21 Select Use this server for secondary authentication if you want to use this LDAP server as the second
level of authentication.
22 Click OK.
Add RADIUS Authentication Server
You can add an RADIUS authentication server to bound to the SSL gateway. All users in the bounded
authenticated server will be authenticated.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Edges link.
5 Double-click a vShield Edge instance.
6 Click the VPN tab.
7 Click the SSL VPN-Plus tab.
8 In the Configure panel, click Authentication.
9
Click the Add ( ) icon
The Add Server dialog box opens.
10 In Type, select RADIUS.
11 Type the IP address of the RSA Radius server.
12 Type the port number for the RADIUS server.
13 Type the timeout period in seconds.
14 Select Enabled or Disabled to indicate whether the server is enabled.
15 Type and re-type the shared secret specified while adding the authentication agent in the RSA security
console.
16 Type the NAS IP address for authentication.
17 Type the number of times the RADIUS server is to be contacted if it does not respond.
18 Select Use this server for secondary authentication if you want to use this server as the second level of
authentication.
Select Terminate Session if authentication fails if required.
19 Click OK.
Add RSA-ACE Authentication Server
You can add an RSA-ACE authentication server to bound to the SSL gateway. All users in the bounded
authenticated server will be authenticated.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
Chapter 9 vShield Edge Management
VMware, Inc. 117