Compatible Systems 10/100 manual Setting up Radius Authentication

Models: 10/100

1 13
Download 13 pages 59.97 Kb
Page 10
Image 10

Chapter 2 - Basic Configuration Guide

7

Setting up RADIUS Authentication

If you are using a RADIUS server for user authentication, you must set up the IPC to commu- nicate with a RADIUS server and also set some special parameters in the RADIUS server itself.

Setting the IntraPort for a RADIUS Server

Just a few basic settings are required for the IntraPort to communicate with a RADIUS server.

Primary server IP address

Secret

VPN password attribute number

VPN group attribute number

CV: Use the RADIUS Configuration Dialog Box.

TB: Use the configure command and set the PrimAddress, Secret, VPNPassword and VPNGroupInfo keywords in the RADIUS section.

RADIUS Server User Authentication Settings

In order for client authentication and accounting to be done on a RADIUS server, the RADIUS server must be configured with four pieces of data for each user.

User name

Login password

Group configuration

Tunnel secret

The user name is kept in the User-Name attribute in the RADIUS server and the login pass- word is kept in the Password attribute. The group configuration is kept in attribute number 77 of the RADIUS database, and the tunnel secret is kept in attribute number 69. These two attribute numbers must be configured in the RADIUS server’s dictionary file.

The RADIUS server will also log the real IP address of the client and the IP address assigned to the client by the IPC as it begins to account for the client. To use this feature, the two attribute numbers for these two IP address strings must also be configured in the RADIUS server’s dictionary file and in the RADIUS section of the IntraPort’s configuration.

The following is an example for a Livingston RADIUS server dictionary file:

ATTRIBUTEClient-Real-IP66 string

ATTRIBUTEClient-Assigned-IP67string

ATTRIBUTEVPN-Password69 string

ATTRIBUTEVPN-GroupInfo77 string

The following is a sample RADIUS user database entry from a Livingston RADIUS server.

User-Name = corpauser

Password = “radiuslogin”

VPN-Password = “abc”

VPN-GroupInfo = “CorporateA”

After making and saving these changes, you must restart the RADIUS server in order for it to recognize the new settings.

ϖNote: Refer to the user manual for your RADIUS server for the exact format of dictionary and user database entries.

ϖNote: Although MacRADIUS servers offer a GUI, the custom attribute settings will require

Page 10
Image 10
Compatible Systems 10/100 manual Setting up Radius Authentication, Setting the IntraPort for a Radius Server

10/100 specifications

Compatible Systems 10/100 is a technology designed for networking devices that allows for efficient data transmission at speeds of 10 megabits per second (Mbps) and 100 megabits per second. This dual capability enables seamless communication in various networking environments, accommodating both older devices that operate at 10 Mbps and newer devices that can utilize the faster 100 Mbps rate. The compatibility aspect is essential for mixed media and legacy systems, ensuring that organizations can transition to faster networks without obsolete older equipment.

One of the primary features of Compatible Systems 10/100 is its auto-negotiation capability. This technology automatically detects the highest possible speed supported by both the device and the network, allowing for optimal performance without manual configuration. This feature simplifies the setup process for users and reduces the potential for connectivity issues, making it ideal for businesses with diverse hardware.

Another critical characteristic of Compatible Systems 10/100 is its support for both Ethernet and Fast Ethernet standards. Ethernet operates at 10 Mbps, while Fast Ethernet, introduced in the mid-1990s, supports speeds of up to 100 Mbps. This flexibility means that organizations can implement a mixed environment while ensuring that they can leverage the benefits of higher-speed connections where necessary.

In terms of physical layer technology, Compatible Systems 10/100 typically employs twisted-pair cabling, following the Category 5 (Cat 5) standard or higher. This cabling supports higher frequencies and reduced crosstalk, enabling reliable data transmission across various distances. Ethernet over twisted pair is widely used due to its cost-effectiveness and ease of installation.

Additionally, the technology incorporates full-duplex communication capabilities, allowing for data transmission and reception simultaneously, effectively doubling the potential throughput without interference. This feature is particularly advantageous in busy network environments, ensuring that data packets can flow freely without congestion.

Overall, Compatible Systems 10/100 serves as a robust solution for organizations looking to maintain compatibility with legacy systems while incorporating the advancements of modern networking technologies. Its combination of auto-negotiation, support for multiple standards, and reliance on reliable cabling infrastructure allows businesses to scale their networks efficiently and effectively. As they move towards higher speeds and advanced technologies, the foundation provided by Compatible Systems 10/100 remains indispensable.