# Example VPN configuration 3: create User elements

User authentication is configured in the same way for VPN client connections and normal, unencrypted connections. The same User elements (user accounts) can be used for both.

##

Note: This configuration scenario does not explain all settings related to user authentication.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Make sure that user database replication is enabled for the NGFW Engine.
   1. Right-click the NGFW Engine, then select Options.
   2. Make sure that User DB Replication is selected.
2. Select Configuration, then browse to User Authentication.
3. Browse to Users > InternalDomain.
4. Right-click the stonegate Internal User Group, then select New > Internal User.
5. In the Name field, enter the user name that the end user uses to authenticate to the VPN.
6. On the Authentication tab, click Add in the Authentication Method section.
7. Select User Password and click Select.
   This default element allows user password authentication for the internal LDAP database.
8. In the Password and Confirm Password fields, enter and confirm the password.
   Make a note of the password so that you can communicate it to the user. The passwords entered in the VPN client are encrypted so that they remain confidential as they are transferred over the Internet.
9. Click OK.

## Result

The information is added to the Management Server’s internal LDAP user database.

## Next steps

Create Access rules.