Users Guide

436 | Virtual Private Networks Dell Networking W-Series ArubaOS 6.4.x| User Guide
In the WebUI
1. Navigate to the Configuration > Advanced Services > VPN Services > Dialers page. Click Add to add a
new dialer or the Edit tab to edit an existing dialer.
2. Enter the Dialer Name that identifies this setting.
3. Configure the dialer to work with PPTP or L2TP by selecting Enable PPTP or Enable L2TP.
4. Select the authentication protocol. This should match the L2TP or PPTP authentication type configured for
the VPN in the Configuration > Advanced Services > VPN Services > IPSEC window.
5. (Optional) Select Send Direct Network Traffic In Clear to enable “split tunneling” functionality so that
traffic destined for the internal network is tunneled, while traffic for the Internet is not.
This option is not recommended for security reasons.
6. (Optional) Select Disable Wireless Devices When Client is Wired to allow the dialer to shut-down the
wireless interface when it detects that a wired network connection is in use.
7. (Optional) Select Enable SecurID New and Next Pin Mode to enable site-to-site VPN support for SecurID
new and next pin modes.
8. For L2TP:
n Set the IKE Hash Algorithm to the value defined in the IKE policy on the Advanced Services > VPN
Services > IPSEC window.
n If a pre-shared key is configured for an IKE Shared Secret in the VPN Services > IPSEC window, enter
the key.
n The key you enter in the Dialers window must match the pre-shared key configured on the IPsec page.
n Select the IPsec Mode Group that matches the Diffie–Hellman Group configured for the IPsec policy.
n Select the IPsec Encryption that matches the encryption configured for the IPsec policy.
n Select the IPsec Hash Algorithm that matches the hash algorithm configured for the IPsec policy.
9. Click Done to apply the changes made prior to navigating to another page.
In the CLI
Issue the following commands in the CLI to configure the VPN dialer:
(host(config) #vpn-dialer <name>
enable {dnctclear|l2tp|pptp|secureid_newpinmode|wirednowifi}
ike authentication {pre-share <key>|rsa-sig}
ike encryption {3des|des}
ike group {1|2}
ike hash {md5|sha}
ipsec encryption {esp-3des|esp-des}
ipsec hash {esp-md5-hmac|esp-sha-hmac}
ppp authentication {cache-securid|chap|mschap|mschapv2|pap}
Assigning a Dialer to a User Role
The VPN dialer can be downloaded using Captive Portal. For the user-role assigned through Captive Portal,
configure the dialer by using the dialer name.
For example, if the Captive Portal client is assigned to the guest role after logging in, and the dialer is called
mydialer, configure mydialer as the dialer to be used in the guest role.
In the WebUI
1. Navigate to the Configuration > Security > Access Control > User Roles page.
2. Click Edit for the user role.
3. Under VPN Dialer, select the dialer you configured and click Change.
4. Click Apply.