Allowing mobile users to set up IPsec VPN tunnels

In Configuration > Users > Access privileges > Detailed access tab:

1. Click on Add.
2. In the Domain name field, select the directory (domain) of users authorized to set up IPsec tunnels. In this example: stormshield.eu.
3. In the User – Group field: select the user group from the list. In this example: EAP-TLS VPN Users.
   
4. Click on Apply.
   A row will be added to the grid.
   
5. Click on the cell in this row in the IPsec column and select Allow.
6. Double-click on the cell in this row in the Status column to show the status Enabled.
7. Click on Apply then on Save.

The users in this group are now allowed to set up IPsec tunnels: