You are here: Webhelp 5.5R7 > VPN > SSL VPN > Host Binding

Host Binding

The host binding function verifies that the hosts are running the SSL VPN clients according to their host IDs and user information. The verification process is:

  1. When an SSL VPN user logs in via the SSL VPN client, the client will collect the host information of main board serial number, hard disk serial number, CUP ID, and BIOS serial number.
  2. Based on the above information, the client performs the MD5 calculation to generate a 32-digit character, which is named host ID.
  3. The client sends the host ID and user/password to the SSL VPN server.
  4. The SSL VPN server verifies the host according to the entries in the host unbinding list and host binding list, and deals with the verified host according to the host binding configuration.

The host unbinding list and host binding list are described as follows:

  • Host unbinding list: The host unbinding list contains the user-host ID entries for the first-login users.

  • Host binding list: The host binding list contains the user-host ID entries for the users who can pass the verification. The entries in the host unbinding list can be moved to the host binding list manually or automatically for the first login. When a user logs in, the SSL VPN server will check whether the host binding list contains the user-host ID entry of the login user. If there is a matched entry in the host binding list, the user will pass the verification and the sever will go on checking the user/password. If there is no matched entry for the login user, the connection will be disconnected.

Configuring Host Binding

Configuring host binding includes host binding/unbinding configurations, super user configurations, shared host configurations, and user-host binding list importing/exporting.

Configuring Host Binding and Unbinding

To add a binding entry to the host binding list, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Compliance Check/Binding page.

  3. Click Host Binding.
  4. With the Binding and Unbinding tab active, select the entries you want to add to the Host Unbinding List.
  5. Click Add to add the selected entries to the Host Binding List.

To delete a binding entry from the host binding list, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Compliance Check/Binding page.

  3. Click Host Binding.
  4. With the Binding and Unbinding tab active, select the entries you want to delete from the Host binding List.
  5. Click Unbinding to remove the selected entries from this list.

Configuring a Super User

The super user won't be controlled by the host checking function, and can log into any host. To configure a super user, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Checking/Binding page.

  3. Click Host Binding.
  4. With the User Privilege tab active, click New.
  5. Click OK to save the settings.

Configuring a Shared Host

Clients that log in from the shared host won't be controlled by the host binding list. To configure a shared host, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Checking/Binding page.
  3. Click Host Binding.
  4. With the Host ID Privilege tab active, click New.
  5. Click OK to save the settings.

Importing/Exporting Host Binding List

To import the host binding list, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Checking/Binding page.
  3. Click Host Binding.
  4. With the Binding and Unbinding tab active, click Import.
  5. Click Browse to find the binding list file and click Upload.

To export the host binding list, take the following steps:

  1. Select Network > VPN > SSL VPN.
  2. At the top right corner, click Host Compliance Check/Binding to visit the Host Checking/Binding page.
  3. Click Host Binding.
  4. With the Binding and Unbinding tab active, click Export.
  5. Select a path to save the host binding list.