Chapter 2 - Basic Configuration Guide | 7 |
Setting up RADIUS Authentication
If you are using a RADIUS server for user authentication, you must set up the IPC to commu- nicate with a RADIUS server and also set some special parameters in the RADIUS server itself.
Setting the IntraPort for a RADIUS Server
Just a few basic settings are required for the IntraPort to communicate with a RADIUS server.
•Primary server IP address
•Secret
•VPN password attribute number
•VPN group attribute number
CV: Use the RADIUS Configuration Dialog Box.
TB: Use the configure command and set the PrimAddress, Secret, VPNPassword and VPNGroupInfo keywords in the RADIUS section.
RADIUS Server User Authentication Settings
In order for client authentication and accounting to be done on a RADIUS server, the RADIUS server must be configured with four pieces of data for each user.
•User name
•Login password
•Group configuration
•Tunnel secret
The user name is kept in the
The RADIUS server will also log the real IP address of the client and the IP address assigned to the client by the IPC as it begins to account for the client. To use this feature, the two attribute numbers for these two IP address strings must also be configured in the RADIUS server’s dictionary file and in the RADIUS section of the IntraPort’s configuration.
The following is an example for a Livingston RADIUS server dictionary file:
The following is a sample RADIUS user database entry from a Livingston RADIUS server.
Password = “radiuslogin”
After making and saving these changes, you must restart the RADIUS server in order for it to recognize the new settings.
ϖNote: Refer to the user manual for your RADIUS server for the exact format of dictionary and user database entries.
ϖNote: Although MacRADIUS servers offer a GUI, the custom attribute settings will require