Manage Connectivity
You can specify a set of resource locations (connectors) through which AD or RADIUS servers can be reached. Admins can choose the Resource Locations through which back-end AD and RADIUS servers must be reached.
To enable this feature, customers can set up a mapping between their back-end AD/RADIUS server subnets such that if the authentication traffic falls under a specific subnet, then that traffic is directed to the specific resource location. However, If a resource location isn’t mapped to a subnet, then admins can specify to use the wildcard resource location for those subnets.
Note:
It is recommended to perform manage connectivity configuration through the Adaptive Authentication portal’s user interface rather than directly on NetScaler® (using GUI or CLI). Changes made on NetScaler are not automatically synced with the Adaptive Authentication portal and might be lost.
-
On the Adaptive Authentication UI, click Manage Connectivity.
-
Enter the subnet details and select the respective resource location.
Note:
If you clear the Use any available resource location for remaining subnets checkbox, only the traffic directed towards the configured subnets is tunneled.
-
Click Add, and then click Save Changes.
Note:
- Only RFC1918 IP address subnets are allowed.
- The number of subnet-resource location mappings per customer is limited to 10.
- Multiple subnets can be mapped to a single resource location.
- To update the subnet entry, delete the existing entry and then update.
- If you rename or remove the resource location, make sure to remove the entry from the Manage Connectivity screen in the Adaptive Authentication user interface.
- Any changes made to the resource location mapping by using the following CLI commands are overwritten by the changes pushed from the user interface (Adaptive Authentication Provisioning > Manage Connectivity).
set cloudtunnel parameter -subnetResourceLocationMappingsset policy expression aauth_allow_rfc1918_subnets <>set policy expression aauth_listen_policy_exp <>
-
Click Next to go to Instance Management section.