Document Outline

• Contents
• Figures
• Tables
• Preface
  • Before you begin
  • Text conventions
  • Acronyms
  • Related publications
  • Hard-copy technical manuals
  • How to get help
    • Finding the latest updates on the Nortel Web site
      • Link to
      • Takes you directly to the
    • Getting help from the Nortel Web site
    • Getting help over the phone from a Nortel Solutions Center
    • Getting help from a specialist by using an Express Routing Code
    • Getting help through a Nortel distributor or reseller
• New in this release
  • Features
    • LDAP proxy password management support for Active Directory
    • LDAP 3DES password encryption
    • LDAP user configurable encryption key
    • LDAP optimization scheduling
    • RADIUS dynamic filtering
    • CRL Retrieval Scheduling
• Chapter 1
• Authentication services
  • SSL and digital certificates
  • Tunnel certificates
  • Authentication servers
• Chapter 2
• Configuring servers
  • Using IPsec client
    • LDAP encryption keys
    • Encrypting with 3DES password
      • 1 Select Servers > LDAP.
      • 2 Click Enable TripleDES.
    • Configuring LDAP user encryption key
      • 1 Select Servers > LDAP.
    • Optimizing LDAP scheduling
      • 1 Select Servers > LDAP.
      • 2 Enable Automatic Optimization.
    • Configuring internal LDAP server authentication
    • Configuring LDAP proxy server authentication
      • 1 Select Servers > LDAP Proxy and click Enable Access to LDAP Proxy Server.
    • LDAP proxy user authentication and password management
      • 1 Select Servers > LDAP Proxy.
    • Monitoring LDAP servers
  • RADIUS authentication service
    • Configuring RADIUS authentication
      • 1 Select Options > Authentication Options.
      • 2 Click User Group Security Authentication.
    • RADIUS authentication class attribute values
    • RADIUS-Assigned Framed-IP-Address attribute
    • Configuring IPsec authentication
      • 1 Select Servers > Radius Auth and click Enable Access to RADIUS Authentication.
      • 10 Select Profiles > Groups > Edit > IPsec Configure.
    • Configuring RADIUS dynamic filters
    • Configuring PPTP and RADIUS
      • 1 Select Servers > Radius Auth and click Enable Access to RADIUS Authentication.
    • Configuring group-level RADIUS authentication
      • 1 Select Profiles > Groups > Edit > IPsec Configure.
    • Vendor-specific RADIUS attribute
    • Configuring RADIUS accounting
      • 1 Select Servers > Radius Acct.
  • Configuring DHCP servers
    • 1 Select Servers > DHCP.
    • 1 Select Servers > User IP address.
    • 9 Click Override Blackout Interval when no addresses are available to
    • 1 Select Servers > User IP address.
    • Browser security checks
    • Configuring SSL/TLS and configuring HTTP services
  • Configuring DNS servers
    • 1 Select System > Identity.
• Chapter 3 Using certificates
  • LDAP server SSL encryption
    • Installing LDAP certificates
      • 1 Select Servers > LDAP.
      • 2 Click Import Secure LDAP (SSL) CA certificate.
    • LDAP special characters
      • 1 Select System > Certificates.
    • External LDAP proxy
    • Configurable warning time for certificate expiration
      • 1 Select System > Certificates.
  • VPN security using digital certificates
  • Setting up public key infrastructure (PKI)
    • CA and X.509 certificates
    • Loading certificates
    • Generating a server certificate request
    • Installing server certificates using cut and paste #7 and #10
      • 1 Select System > Certificates.
      • 2 Click PKCS #10 (or PKCS #7) Certificate Request.
    • Installing server certificates using CMP
      • 1 Select System > Certificates.
      • e In the Recover Certificate field, enter the certificate reference number and authentication code.
      • 1 Select System > Certificates.
      • 2 Select Import Tunnel or Transport Certificate.
      • 2 Under Certificate Signature Requirements, select Validate Issuer if you do
      • 3 Under Installed Tunnel and Transport Certificates, enable Allow All to
  • Trusted CA certificate settings
    • Group assignment by user identification
    • Allow All policy
    • Access control by Subject DN
    • Group and certificate association configuration
  • CA key update
  • Configuring a certificate revocation list (CRL)
    • Configuring CRL servers
      • 1 Select System > Certificates.
  • CRL distribution points
  • CRL retrieval
    • Enabling certificate use for tunnels
      • 1 Select Profiles > Groups > Edit > IPsec > Configure.
      • 2 Enable RSA Digital Signature.
    • Identifying individual users with certificates
      • 1 Select Profiles > Users > Add User/Edit.
      • 3 Enter either the relative distinguished name or the full distinguished name.
    • Identifying branch offices with certificates
    • IPsec authentication
    • L2TP/IPsec authentication