NETGEAR UTM5 User Manual

Managing Users, Authentication, and VPN Certificates
370
ProSecure Unified Threat Management (UTM) Appliance
Bind DN The LDAP or Active Directory DN that is required to access the LDAP or Active
Directory authentication server. This should be a user in the LDAP or Active
Directory directory who has read access to all the users that you would like to
import into the UTM. The Bind DN field accepts two formats:
• A display name in the DN format. For example:
cn=Jamie Hanson,cn=users,dc=test,dc=com.
• A Windows login account name in email format. For example:
jhanson@testAD.com. This last type of bind DN can be used only for a
Windows Active Directory server.
Bind Password The authentication secret or password that is required to access the LDAP or
Active Directory authentication server.
LDAP Encryption From the drop-down list, select the encryption type for the connection between the
UTM and the LDAP or Active Directory server:
• None. The connection is not encrypted. This is the default setting.
• TLS. The connection uses Transport Layer Security (TLS) encryption.
• SSL. The connection uses Secure Socket Layer (SSL) encryption.
Search Base The DN at which to start the search, specified as a sequence of relative
distinguished names (RDNs), connected with commas and without any blank
spaces. For most users, the search base is a variation of the domain name. For
example, if your domain is yourcompany.com, your search base DN might be as
follows: dc=yourcompany,dc=com.
UID Attribute The attribute in the LDAP directory that contains the user’s identifier (UID).
For an Active Directory, enter sAMAccountName.
For an OpenLDAP directory, enter uid.
Member Groups
Attribute
This field is optional. The attribute that is used to identify the groups an entry
belongs to.
For an Active Directory, enter memberOf.
For OpenLDAP, you can enter a customized attribute to identify the groups of an
entry.
Group Members
Attribute
This field is optional. The attribute that is used to identify the members of a group.
For an Active Directory, enter member.
For OpenLDAP, you can enter a customized attribute to identify the members of a
group.
Additional Filter This field is optional. A filter that is used when the UTM is searching the LDAP
server for matching entries while excluding others. (Use the format described by
RFC 2254.)
The following search term examples match users only:
Active Directory. objectClass=user
Open LDAP. objectClass=posixAccount
Radius Port The port number for the RADIUS server. The default port number is 1812.
Table 94. Add Domain screen settings (continued)
Setting Description

NETGEAR UTM5 Specifications

General

Brand	NETGEAR
Model	UTM5
Category	Firewall
Language	English