90030500B Configuring RADIUS Page 177
Configuring RADIUS
To configure PortServer II to obtain user name and password authentication from a
RADIUS server for users on all modem ports:
1. Configure a modem for each dial-in connection, as described in
Chapter 9,
Configuring Modems
.
2. Enable RADIUS authentication on all dial-up ports by entering a command in the
format:
set radius run=on primary=<ipaddress> secret=<password>
<
ipaddress
> is the IP address of the primary RADIUS server. <
password
>
is the authentication key passed between PortServer II and the RADIUS server,
and must be the same as the authentication key configured on the RADIUS server.
For example:
set radius run=on primary=192.83.159.1 secret=x3y67pft973
Note:
If you have a secondary RADIUS server to use when the primary server is
down or cannot be contacted, configure it with a command similar to the
following example:
set radius secondary=192.83.159.2 secret=nnxzf25308
3. If any RADIUS authenticated user will be assigned an IP address from a pool, set
up the IP Address Pool, as described in
Chapter 4, Basic Configuration
.
4. Configure RADIUS on your server, as described in the next section.