This section describes the procedures for configuring the Access Gateway so that a client can access the Digital Airlines site. Before continuing, make sure you have completed the prerequisite tasks described in Prerequisite Tasks and Section 6.2, Setting Up the Web Server.
On the client machine, open a browser and log in to the Administration Console.
In the Administration Console, click> .
The IP address or name of the Access Gateway you installed should be listed in the display window.
An Access Gateway that has not been configured displays a yellow health status.
In theoption, select the configuration you have assigned to the Identity Server.
This sets up the trust relationship between the Access Gateway and the Identity Server that is used for authentication.
In the DAL as the new , then click ., click , specify
Enable a listening address.
If the server has only one IP address, only one is displayed and it is automatically selected as the. If the server has multiple addresses, you can select one or more IP addresses to enable. You must enable at least one address by selecting its check box.
Configure a listening port.
Non-Secure Port: Select 80, which is the default port for HTTP.
Secure Port: This is the HTTPS listening port. This port is unused and cannot be configured until you enable SSL. This configuration scenario does not contain SSL configuration instructions.
In the, click and specify the following information:
Proxy Service Name: Specify any name that intuitively identifies this service on your Access Gateway server. For this example, specify Dallistener.
Public DNS Name: The DNS name you want the public to use to access your Digital Airlines site. This DNS name must resolve to the IP address you set up as the listening address. This example uses am3bc.provo.novell.com.
Web Server IP Address: The IP address of the Web server where your Digital Airlines files are installed.
Host Header: Selectfrom the drop-down menu. The Web server and the Digital Airlines pages have not been set up to require the DNS name of the Web server in the Host Header, so it does not matter what name is placed in the Host Header.
Your form should look similar to the following:
In the, click .
Click, then in the , click .
Type everything in the field, then click .
In thefield, select from the drop-down menu.
Under, you should see /*, which includes everything on that server.
Later on, you will be instructed to change thefield to a , but for now, we want you to learn how the example works without any authentication.
In the, verify that the protected resource you created is enabled, then click .
Click the> .
To apply the changes, click> .
Until this step, nothing has been saved. Thestatus pushes the configuration to the server. When the configuration update has completed successfully, the server returns the status of .
To update the Identity Server for the trusted relationship, click> , then click > .
To test the results, complete the following.
Open a browser on the client machine.
Enter the URL for the proxy service. For this example, it is
Your network needs to be configured so that this published DNS name of the proxy service resolves to the IP address of the Access Gateway. The reverse proxy hides the internal address of the Web server.
You should see the Digital Airlines page.
If you get an error, check the time on the Access Gateway and Identity Server. Their time should be synchronized and must be within 5 minutes of each other.
Close the browser.
To require authentication for access to the site and to configure access to the protected pages (the VPN application and the hidden Sales System site), continue with Section 6.4, Implementing Access Restrictions.
Currently, theand buttons do not link to available pages. They exist to illustrate what you could do when you require your users to authenticate before accessing the site.
For example, thebutton could be configured so that the redirected request initiates a mail session to the user’s default e-mail application and injects the login credentials to provide access to the user’s protected, Web-based e-mail account.
Thebutton could be configured to set up a federated account with the company that provides medical benefits for your company.