NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
3-10 LAN Configuration
v1.0, April 2010
Enable LDAP
information
Select the Enable LDAP information check box to enable the DHCP server to
provide Lightweight Directory Access Protocol (LDAP) server information. Enter
the following settings.
Note: The LDAP settings that you specify as part of the VLAN profile are used
only for SSL VPN and VPN firewall authentication, but not for Web and email
security.
LDAP Server The IP address or name of the LDAP server.
Search Base The search objects that specify the location in the directory
tree from which the LDAP search begins. You can specify
multiple search objects, separated by commas. The search
objects include:
• cn (for common name)
• ou (for organizational unit)
• o (for organization)
• c (for country)
• dc (for domain)
For example, to search the Netgear.net domain for all last
names of Johnson, you would enter:
cn=Johnson,dc=Netgear,dc=net
Port The port number for the LDAP server. The default setting is 0
(zero).
DNS Proxy
Enable DNS Proxy This is optional. Select the Enable DNS Proxy radio button to enable the VPN
firewall to provide a LAN IP address for DNS address name resolution. This
setting is disabled by default.
Note: When you deselect the Enable DNS Proxy radio button, the VPN firewall
still services DNS requests that are sent to its LAN IP address.
Inter VLAN Routing
Enable Inter VLAN
Routing
This is optional. Select the Enable Inter VLAN Routing radio button to ensure
that traffic is routed only to VLANs for which inter VLAN routing is enabled. This
setting is disabled by default. When the Enable Inter VLAN Routing radio button
is not selected, traffic from this VLAN is not routed to other VLANs, and traffic
from other VLANs is not routed to this VLAN.
Table 3-1. VLAN Profile Settings (continued)
Setting Description (or Subfield and Description)