Creating a User and User Group

Scenario

You can create users and user groups only when Client Authentication Mode is set to Password authentication (local).

Limitations and Constraints

• Each user can establish a maximum of five connections.
• A maximum of 500 users can be created on a VPN gateway.

Creating a User

1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
5. Click the P2C VPN Gateways tab. In the P2C VPN gateway list, locate the target P2C VPN gateway, and click Configure Server or View Server in the Operation column.
6. On the Server tab page, set Client Authentication Mode to Password authentication (local) and click OK.
7. Choose User Management > Users, and click Create User.
   Table 1 describes the parameters.

   Table 1 Parameters for creating a user

   Parameter	Description
   Name	The value can contain a maximum of 64 characters, including letters, digits, periods (.), underscores (_), and hyphens (-). NOTE: Do not use the following usernames that are reserved in the system: L3SW_ (prefix) link Cascade SecureNAT localbridge administrator (case-insensitive)
   Description	Enter description information as needed.
   Password	The value contains 8 to 32 characters. The value must contain at least two types of the following characters: uppercase letters, lowercase letters, digits, and special characters including `~!@#$%^&*()-_=+\|[{}];:'",<.>/? and spaces. The password cannot be the username or the reverse of the username. NOTE: For account security purposes, you are advised to change the password periodically.
   Confirm Password	Reenter the password.
   User Group	Select the user group to which the user belongs. NOTE: A user that is not added to any user group cannot access resources on the cloud. If no access policy is configured for the selected user group, the user will be unable to access resources on the cloud.
   Specify Client IP Address	Determine whether to specify a client IP address. Enabled The existing connection of the specified IP address will be interrupted. Disabled CAUTION: The specified IP address cannot be the same as the gateway IP address of the client address pool. The specified IP address must be the first host address in a CIDR block with a 30-bit mask. The specified IP address cannot be the same as the IP address that has been specified for another user. The specified IP address must be in the client address pool.

8. Click OK.

   The Users tab page is displayed, showing the user information, including the name/ID, user group, creation time, and static IP address.

NOTE:

The maximum number of users that can be added is the maximum number of connections supported by the corresponding VPN gateway.

Creating a User Group

1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
5. Click the P2C VPN Gateways tab. In the P2C VPN gateway list, locate the target P2C VPN gateway, and click Configure Server or View Server in the Operation column.
6. On the Server tab page, set Client Authentication Mode to Password authentication (local) and click OK.
7. Choose User Management > User Groups. Click Create User Group, enter the name and description, and click OK.

NOTE:

• The name of a user group must be unique.
• A maximum of 50 user groups are supported.
• Currently, the quota of user groups cannot be modified.
• After creating a user group, you need to configure an access policy for accessing resources on the cloud.

Adding a User to a User Group

1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
5. Click the P2C VPN Gateways tab. In the P2C VPN gateway list, locate the target P2C VPN gateway, and click Configure Server or View Server in the Operation column.
6. On the Server tab page, set Client Authentication Mode to Password authentication (local) and click OK.
7. Add a user to a user group using either of the following methods:
   • Add a user on the Users tab page.
     1. Choose User Management > Users, and click Create User.
     2. Set parameters as prompted.

        Select the user group to which the user is to be added.

        NOTE:

        If you do not select a user group when creating a user, you can click Modify in the Operation column of the user to select a user group.

     3. Click OK.
   • Add a user on the User Groups tab page.
     1. Choose User Management > User Groups. Click Create User Group, enter the name and description, and click OK.
     2. Locate the row that contains the created user group, and click Add User in the Operation column.
     3. In the Add User dialog box, select one or more users, click , and click OK.