SonicWALL Aventail 10.6 Connect Tunnel Service User Guide
Contents
1. SonicWALL Aventail Connect Tunnel Service 10 6 User Guide SonicWALL rciass SONICWALL gt Aventail amp DYNAMIC SECURITY FOR THE GLOBAL NETWORK SonicWALL Aventail Connect Tunnel Service 1 SonicWALL Aventail Connect Tunnel Service The Connect Tunnel client is a Windows client component of the SonicWALL Aventail E Class Secure Remote Access SRA solution that enables secure authorized access to Web based and client server applications and to Windows file shares In a server environment you can install and configure an add on component Connect Tunnel Service so that the VPN connection starts automatically without user intervention no user login is required and no user interface or icons are displayed For example you may want to synchronize data between a remote system in the field and a file server secured behind the VPN at corporate headquarters On the remote system running the Windows Server platform Connect Tunnel Service is configured to run at a specific time connect to the corporate file server and synchronize its database with the master database at headquarters Installing Connect Tunnel Service Using the Connect Tunnel Service involves installing both Connect tunnel and Connect Tunnel Service gt To install and configure Connect Tunnel Service 1 On the Client Installation Packages page in AMC Agent Configuration gt Download download the 32 bit or 64 bit installation packages for both t2. address of the SonicWALL Aventail E Class SRA appliance to log in to Login group Type the name of the realm to log in to Username and Password Type the credentials for a user in this Login group realm You must enter a username and password or a certificate CN In some cases of chained authentication both a userame and certificate are required Certificate CN A certificate s common name CN identifies its owner Specify the CN for the certificate associated with this realm 6 On the Service tab configure the following settings Setting Description Number of attempts to Specify how many times to attempt restarting if an initial restart a failed connection connection attempt fails Time interval between Specify the amount of time in minutes to wait between restart attempts restart attempts ECLASS Secure Remote Access SonicWALL Aventail Connect Tunnel Service 3 7 Click the Start and Stop buttons to control the service F Aventail VPN Service Properties Information You can change the service behavior by modifying the service parameters on this page VPN Service Number of attempts to restart a Failed connection V Endless retries Time interval between restart attempts in minutes 2 Following buttons can be used to control the service Start 8 To verify that Connect tunnel started open the Aventail VPN Connection shortcut on the desktop You should see the established connection Alternativ
3. and or batch file For example start and stop the service on a remote computer with the following commands sc SERVERNAME start ctssrv sc SERVERNAME stop ctssrv To start or stop the Connect Tunnel Service from the command line or a third party application invoke these commands Swindir system32 sc exe start ctssrv swindir system32 sc exe stop ctssrv ECLASS Secure Remote Access Troubleshooting SonicWALL Aventail Connect Tunnel Service 5 Use the Windows Event Viewer Control Panel gt Administrative Tools gt Event Viewer gt Application where the Source is CTS to view any information warning or error messages related to running Connect Tunnel Service For more detailed messages look in the service log the default location is ALLUSERSPROFILE Application Data Aventail Notes e If your environment includes an outbound HTTP proxy for access to the Internet you must use one that does not require authentication otherwise you will see the following error message in the log file for Connect Tunnel Service ctssrv log Direct internet access is not available You must also configure Connect Tunnel Service to run under a Windows user account with administrative privileges ECLASS Secure Remote Access SonicWALL Inc 2001 Logic Drive San Jose CA 95124 SONICWALL gt ka T 1 408 745 9600 F 1 408 745 9300 8 Aventail LE www sonicwall com DYNAMIC SECURITY FOR THE GLOBAL NETWORK 2011 SonicWALL
4. and the SonicWALL logo is registered trademarks of SonicWALL Inc Dynamic Security For The Global Network is a trademark of SonicWALL Inc Other product names mentioned herein may be trademarks and or registered trademarks of their respective companies Specifications and descriptions subject to change without notice 06 10 SW 996 232 002045 00 Rev A 10 2011
5. ely you can issue the ipconfig command on the command line to verify that you have a virtual IP address for the Aventail VPN Connection Importing the Client Certificate The certificate specified for Connect Tunnel Service must be located in the Local Computer certificate store of the user s device certificates in a user s store are not available to the service The Microsoft Management Console MMC is a tool for managing administrative tools including snap ins and extension snap ins gt 1 To import a certificate into the user s Local Computer store To open the Microsoft Management Console click Start and then click Run Type mmc in the Open box In the File menu choose the option for adding a snap in 3 To add a standalone snap in click Add and then click Certificates Snap ins can manage certificates for different accounts select Computer account and then select Local computer You should now see Certificates Local Computer in the list of standalone snap ins The certificate must now be copied to a certificate store In Microsoft Management Console right click Personal and then select All Tasks gt I mport Specify the certificate file you want to import along with its password Place the certificate in your Personal store ECLASS Secure Remote Access 4 SonicWALL Aventail Connect Tunnel Service Using Windows Services to Run Connect Tunnel Service You can use Windows Services to mana
6. ge Connect Tunnel Service on a local or remote computer gt How to use Windows Services to configure and run Connect Tunnel Service 1 On the Windows Server platform running Connect Tunnel Service run Windows Services and open the Aventail VPN Service Properties dialog box Control Panel gt Administrative Tools gt Services gt Aventail VPN Service Aventail VPN Service Properties Local Computer BIK General Log On Recovery Dependencies Service name CtsSrv Display name Aventail VPN Service Description Aventail VPN Service Path to executable C WINDOWS system32 ctssrv exe Startup type Automatic Service status Started You can specify the start parameters that apply when you start the service from here 2 Use these settings to control the service start stop pause resume or disable it set up recovery actions in case of service failure or disable the service for a particular hardware profile Using a Command or Script to Run Connect Tunnel Service You can use the Windows sc exe utility to communicate with Service Controller services exe from the command prompt or in a batch file This enables you for example to automate the startup and shutdown of the Aventail VPN service Or in an environment where you want users to be able to start the VPN connection by clicking on a shortcut and without being aware of the credentials you could also create a shortcut on the desktop that launches a comm
7. he Connect tunnel and Connect Tunnel Service the lt xx gt in the filename represents the language you selected 2 Install Connect tunnel first ngsetup lt xx gt exe or ngsetup64 lt xx gt exe A shortcut named Aventail VPN Connection is created on the desktop 3 Install Connect Tunnel Service ctssetup lt xx gt exe or ctssetup64 lt xx gt exe A shortcut named Aventail VPN Service Options is created on the desktop ECLASS Secure Remote Access 2 SonicWALL Aventail Connect Tunnel Service 4 On the desktop double click the Aventail VPN Service Options shortcut Alternatively double click Aventail VPN Service Options in the Control Panel The Aventail VPN Service Properties dialog box appears F Aventail VPN Service Properties Information By providing all required information below you can configure the VPN connection to start with system startup VPN Service VPN Connection Name Aventail VPN Connection Hostname or IP address 192 168 136 4 Login group AD rea Username Fred Figment Password paea Required fields cam 5 On the VPN tab configure these settings Setting Description VPN Connection Name Type the name of the Aventail Connect client connection object exactly as it appears in the Windows Network Connections window Start Connect To Show All Connections By default this is Aventail VPN Connection Hostname or IP address Type the host name or IP
Download Pdf Manuals
Related Search