Enabling Connect on Demand to SMA 100 Series

To support Connect on Demand, a VPN configuration on the SMA 100 Series must meet the following requirements:

• The user’s effective client certificate enforcement policy, configured at the domain or user level, must be enabled to use client certificates for authentication.
• The user’s effective user name and password caching policy, configured at the global, group, or user level, must be set to Allow saving of username and password, or the user's domain must be a Digital Certificate domain.
• The valid client certificate for the user must be present on the Mac.

• The VPN connection profile must have the user name and password configured, and the appropriate client certificate must be selected.

  If no client certificates are installed, an error message is shown indicating that no matching client certificates are present on your device. The Keychain Access app (in Applications/Utilities) can be used to view client certificates.

• Click the My Certificates category to view available client certificates.

To enable Connect on Demand to an SMA 100 Series

1. On your Mac, open Network Settings in System Preferences.
2. Select the VPN connection from the list of network connections.

3. Select the Connect on demand checkbox to enable the feature.

   

4. Click Apply.