诺基亚为Symbian客户提供基于Web的Mobile VPN配置指南_Nokia Mobile

NokiaMobileVPNWeb-basedconfigurationforSymbiandevicesWorktogether.Smarter.NokiaInc.102CorporateParkDrive,WhitePlains,NY10604USAAmericasTel:18779979199•Email:[e-mail]:[phone]•Email:[e-mail][phone]•UK+441616018908•Email:[e-mail]bai+97143697600•Email:[e-mail]©2008Nokia.Allrightsreserved.NokiaandNokiaConnectingPeopleareregisteredtrademarksofNokiaCorporation.Othertrademarksmentionedarethepropertyoftheirrespectiveowners.Nokiaoperatesapolicyofcontinuousdevelopment,therefore,reservestherighttomakechangesandimprovementstoanyoftheproductsdescribedinthisdocumentwithoutpriornotice.TableofContentsIntroduction......................................................................................................................................................................................3References.....................................................................................................................................................................................3Abbreviationsanddefinitions....................................................................................................................................................3Overview...........................................................................................................................................................................................4Environmentconfiguration.............................................................................................................................................................5Serviceinstallation...........................................................................................................................................................................6Serviceconfiguration.......................................................................................................................................................................7Mobiledeviceconfiguration...........................................................................................................................................................8Pre-requisitesforthemobiledevice..........................................................................................................................................8Configuration................................................................................................................................................................................8IntroductionThisdocumentexplainshowtoconfigureaweb-basedprovisionserviceforSymbianmobileVPNclientswhenusingMicrosoftWindowsServer2008R2[3]asSecureGateway.References[1]Step-by-StepGuide:DeployremoteaccesswithVPNReconnecthttp://www.microsoft.com/downloads/en/details.aspx?FamilyID=7e973087-3d2d-4cac-abdf-cc7bde298847&displaylang=en[2]Nokia_Mobile_VPN_Policy_Specification.doc[3]WindowsServer2008R2http://www.microsoft.com/windowsserver2008/en/us/product-documentation.aspx[4]InternetInformationServerhttp://technet.microsoft.com/en-us/library/cc753433(WS.10).aspxAbbreviationsanddefinitionsIISMicrosoftInternetinformationserviceCACertificateauthoritySGWSecureGatewaySOAServiceOrientedArchitectureURIUniformResourceIdentifierOverviewTheweb-basedmobileVPNisadistributed,SOA-basedapplication.WhenaSymbiandevicerequestsfortheAWS/AgileVPNProvisionServiceinternetserviceinstalledonacorporatesite,theserviceproviderrespondsbysendingthepolicy,CA,andusercertificateovertheinternet.Picture1.Web-basedprovisionsystemforSymbianmobileVPNclientWebservicesframeworkMobileclientmVPNMSInternetInformationServicehttps(URI:SOAPEnvelope(Header(uid/pwd)Body(GetConf/GetCertificate)))Serviceprovider/webapplicationURIofserviceendpointandnameoftheserviceAgileVPNSGWActivedirectoryUserDB,CertificateserverWebserverauthenticationGetConf()authenticate(uid,pwd)/GetCertificate()impersonationCAreferences(store,name)internetEnvironmentconfigurationForinstructionsonsettinguptheinfrastructure,seedocument[1].Themaincomponentsareshowninpicture1.Youneedtwoservers:Webserver[4]andCertificateserver.YoucanuseastandaloneWindowsserver,oranactivedirectorybasedonamoresophisticatedinfrastructuremodel,whereservicesaredistributedacrossanorganisation.Thesystemworksinanydomainmodel.Youdonotneedtomodifythecurrentdomainsetup.Serviceinstallation1.ExtracttheservicepackagecontenttothewebsiteundertheAWSapplication.2.ConfigurethewebservertorequireSSLandbasicauthentication.3.Configureimpersonationtogivetheimpersonatedusertherightstoreadandissuecertificates.Theeasiestwayistocreateanewusertoadomain,andgrantmembershiptotheDomainAdminsgroup.See[4]forinstructions.ServiceconfigurationYouneedtoconfiguretwofilesintheApp_Datadirectory:AgileVPN.polpolicyfiletemplate.Youcanmodifyitasdescribedin[2],oruseitwiththedefaultvalue.Theservicelogicupdatesthegatewayaddressandcertificate-relatedparametersautomatically.Config.xmlconfigurationfile.Enterall