# F5 Big-Ip

#### Supported Features

The integration currently supports the following features:

* SAML
* Radius

<button id="f5_saml" class="accordion h5"><h4>SAML</h4></button>
<DIV id="f5_saml-hide" class="panel">

#### Configuration du VPN Big-Ip (SAML)

Before we start, we consider that the Standard Network Configuration of Big-Ip has already been done, please be sure to have a functional VPN  
**Note:** For a Web Portal authentication the VPN config must include the **Full Webtop** Mode  
First of all, in the Trustelem app settings, enable the authentication method you want to use

#### Configuration de Big-Ip

* In the main tab, click on Access > Federation > SAML Service Provider > Local SP Services

  * Click on Create

  * Give a name to your Service Provider, in the Entity ID field put your Virtual Server's external IP

  * Click on Ok

* In the main tab, click on Access > Federation > SAML Service Provider > External IdP Connectors

  * Download the metadata

  * Click on the arrow on the right of Create and select From Metadata

  * Click on Browse, select the previously downloaded metadata file and give a name to your IdP

  * Click on Ok

* In the main tab, click on Access > Federation > SAML Service Provider > Local SP Services

  * Select the existing SP and click on Bind/Unbind IdP Connectors

  * Click on Add New Row, in the SAML IdP Connectors drop-down, click on the previously created entry

  * Click on Update, then click on Ok

* In the main tab, click on Access > Profiles/Policies > Access Profiles (Per-Session Policies)

  * click on Edit, on your VPN access policy row

  * A diagram appears, delete the Logon Page and Advanced Resource Assign steps with x then Delete button

  * Click on the + between Start and Allow and in the Authentication tab, select SAML Auth and click on Add Item

  * In the AAA Server Drop-down list, select the SAML SP you created previously and click on save

  * Between SAML Auth and Allow, click on + and in the Assignment tab, add the Advanced Resource Assign item

  * Click on Add Entry then Add/Delete. In Network Access and Webtop tabs, respectively select your VPN Network Access and Webtop then click on Update

  * On the Big-Ip page header, click on Apply Access Policy

#### Trustelem Configuration

* In the Entity ID field, put your Virtual Server public IP address

</DIV>

<button id="f5_radius" class="accordion h5"><h4>Radius</h4></button>
<DIV id="f5_radius-hide" class="panel">

#### Big-Ip VPN Configuration (RADIUS)

Before we start, we consider that the Standard Network Configuration of Big-Ip has already been done, please be sure to have a functional VPN  
Note: For a Web Portal authentication the VPN config must include the Full Webtop Mode

First of all, in the Trustelem app settings, enable the authentication method you want to use

#### Trustelem Configuration

* Go on the Service tab and be sure that you have a correctly configured TrustelemConnect connector

* Define a secret then copy it

#### Big-Ip Configuration

* In the main tab click on Access > Authentication > Radius
  * click on Create
  * Give a name to your server, in Mode select Authentication and select Direct in Server Connection
  * In the Server Address field, put the IP address of the server on which is running TrustelemConnect and put 1812 in the Port field
  * In the Secret and Confirm Secret fields, paste the Secret you copied beforehand
  * Next to Character Set select Utf-8 then click on Finished

* In the main tab, click on Access > Profiles/Policies > Access Profiles (Per-Session Policies)
  * click on Edit, on your VPN access policy row
  * Click on the + between Logon Page and Advanced Resource Assign then in the Authentication tab, select RADIUS Auth
  * Click on Add Item then select your freshly created AAA Server. click on Save
  * On the Big-Ip page header, click on Apply Access Policy

</DIV>