Manuals / D-Link / Computer Equipment / Network Router

D-Link DI-308 manual Using RADIUS Authentication, Installing a RADIUS Server

Models: DI-308

1 131

Download 131 pages 18.9 Kb

Page 114

Using RADIUS Authentication

DI-308 ISDN Remote Router

Using RADIUS Authentication

In addition to the dial-in user list, which can hold up to eight users, this model also supports an external authentication server which may provide password storage and usage accounting for thousands of users.

Installing a RADIUS Server

To use RADIUS authentication, you will need to have a Unix- or Windows NT- based machine on your network to act as a RADIUSd server, as well as a copy of the RADIUSd server program itself. You can obtain a copy of the RADIUS software, along with documentation for the server, at

http://www.livingston.com/marketing/products/RADIUS.html or at:

ftp://ftp.livingston.com/pub/le/RADIUS/

Configuring the DI-308 for RADIUS Authentication

To configure the DI-308 to use the RADIUS server set up in the previous section, go to the Main Menu in the console program and choose Advanced Functions and then RADIUS Configuration.

Items in the above submenu are described as follows:

106

Image 114

D-Link manual Using RADIUS Authentication, Installing a RADIUS Server, Configuring the DI-308 for RADIUS Authentication

Contents

DI-308 ISDN Router User’s Guide Rev. 02 AugustCopyright Statement FCC WarningCE Mark Warning TrademarksHardware Limited WarrantyD-Link Offices for Registration and Warranty Service SoftwareWichtige Sicherheitshinweise CONFIGURATION AND MANAGEMENT Table of ContentsINSTALLATION INTRODUCTIONUSING RADIUS AUTHENTICATION PROM SYSTEM CONFIGURATIONUSING TELNET APPENDIX A - TROUBLESHOOTINGAPPENDIX C - IP PROTOCOL AND PORT NUMBERS APPENDIX D - TECHNICAL SPECIFICATIONSAPPENDIX F - CONFIGURATION FILE APPENDIX E - COUNTRY ID NUMBERSPage Built-in Switch Product FeaturesEase of Installation IntroductionISDN Leased Line RADIUS Remote Authentication Dial in User ServiceDHCP Support Dynamic Host Configuration Protocol Standard Phone JacksWhat This Manual Covers Internet AccessApplications for your DI-308 Data CompressionWhat This Manual Doesn’t Cover Packing List Additional Installation RequirementsOther Resources This User’s GuideInstallation The DI-308 Front PanelOrdering Your ISDN Line The DI-308 Rear Panel Telephone Features Installation and Initial ConfigurationStep 1 - Setting up the Console Step 2 - Connecting the Console to the RouterA Warning on Connection Cables Step 4 - Connecting a Telephone or Fax Machine to the Router Using the ConsoleStep 3 - Connecting an ISDN Line to the Router Step 5 - Connecting Ethernet Cables to the RouterImportant Notes on Ethernet Connections Step 6 - Powering Up Devices for Initial Configuration Step 7 - Initial Configuration of the RouterTo log on to the router, use the factory set username and password ‘Admin’ without the quotes. Please note that the user name and password are case-sensitive Choose Network Configuration, IP Configuration Step 8 - Configuring the LAN PortChoose Interface Configuration, LAN From the Main Menu choose Advanced FunctionsStep 9 - Plugging in All Devices Configuration and Management Console Program Main MenuThe Main Menu is shown below System InformationThis menu contains administrative and system-related information The above parameters are described as followsInterface Configuration Operation Mode - The LAN port is Auto Negotiation only State - This is a toggle to Enable or Disable the LAN interfaceThe parameters are described below ISDN Network Configuration IP Configuration IP Stack ConfigurationBelow, the submenus for both the LAN and ISDN interfaces are shown DI-308 ISDN Remote RouterThe parameters are described below change to an adjacent router. The adjacent router must be using the same protocol. Setting this to RIPV1&V2 will give the router the ability to make routing information exchanges with any adjacent router IP Static Route SNMP Agent Configuration IP NetworkingRouter Advertisement SNMP Community Configuration SNMP Trap Manager SNMP Authenticated Trap Advanced FunctionsRemote Access Configuration Remote Network Connections Remote Operation OverviewDial-In User Connections Dial-In Network ConnectionsWhen a packet on the LAN reaches the router, the DI-308 will DI-308 ISDN Remote Router Dial Configuration Dial In IP PoolThe items are described as follows Dial-In User Profile The parameters in the above window are described as follows Press Enter to access the submenu that appears belowPassword - This is the password associated with the above Name field DI-308 ISDN Remote RouterPhone Number Supplied by - Toggle between Router and Caller Remote Network ProfilePress Enter to access the submenu that appears below Incoming DHCP Configuration OutgoingDHCP Server Configuration Dynamic IP Pool Static IP Pool DHCP Relay Agent Filter Configuration Configuring a Filter SetFilter State of Interface Layer 2 Filter Press Enter to access the following screen The parameters of a filter are described belowDI-308 ISDN Remote Router IP Filter Press Enter to access the following screen The IP Filter parameters are described belowDI-308 ISDN Remote Router 3. Disable - This does not apply the IP filter Multiple Home Configuration Static ARP The parameters are described as follows Press Enter to access the following screenState - This toggles enable or disable DI-308 ISDN Remote RouterNAT Configuration How NAT WorksRouter NAT Page Class Setting Local IP AddressesNAT/NAPT Beginning AddressThe configuration screen for the name field appears as follows Dynamic NAT NAT IP Pool Configuration ScreenDynamic NAPT Static NAT Static NAPT Configure NAPT for Special Applications The fields in the above window are described as follows Start Port - Some applications can only send data over a certain range of port numbers. Thus, all port numbers in the specified range must be exempt from the NAPT port translation process. This field defines the beginning range of the port numbers to be exempted from the NAPT port translation process Telnet/Discovery Enable DNS ConfigurationHost Table Host Name - The host name used by the host State - Enables or disables entryItems are described as follows IP - The IP address for the host DI-308 ISDN Remote RouterRADIUS Configuration Multi-Link PPP Configuration Bandwidth on Demand - Enables or disables BOD. When enabled, BOD will manage the implementation of MLPPP using the parameters defined in this window Admin Configuration System MaintenanceSystem Status StatisticsLAN Counter Table Tx Bytes - The total number of bytes transmitted by the routerTx Discard Packets - The number of packets dropped by the router Rx Packets - The number of valid packets received by the router ISDN Counter Table Runtime Tables IP Routing TableHops - This is the remaining hop-count ARP Table PPP TableLog and Trace Event/Error Log Log ConfigurationView Log File Trace Buffer The contents are described as follows Trace Buffer ConfigurationEnables or disables the Trace Buffer feature Direction - The incoming or outgoing connection directionView Trace Buffer Packet Triggered Last CallDiagnostic Connection TestThis feature tests a dial-out ISDN connection IP Ping Test Loopback Test Press Enter to access the next screen Start Test - press Enter or Return to begin the testDI-308 ISDN Remote Router System LAN Test System ISDN TestSoftware Update System RestartFactory Reset System Settings Backup/Restore Items in the windows above and below include DI-308 ISDN Remote Router PROM System Configuration System Configuration The parameters are described as followsMAC Address - This is the physical address for this router TCP/IP Parameters Configuration System ResetA system reset will not affect the router’s settings, but will clear all tables including the routing table and all SNMP counters and tables. It is also used to initiate a software update Software UpdateSoftware Update Control - This toggles Disable and Enable EEPROM Factory Reset Execute BootloadDI-308 ISDN Remote Router Using Telnet via LAN Using TelnetTelnet Configuration Using Telnet via ISDNSystem Timeout Using RADIUS Authentication Installing a RADIUS ServerConfiguring the DI-308 for RADIUS Authentication # Client Name Adding Users to the RADIUS DatabaseIp user Password = “iusespecificip”, FramedIPAddress = 192.168.0.1Problems With the ISDN Line Appendix A - TroubleshootingSome Common Problems with the DI-308 Problems with the LAN Interface3. Verify with your network administrator that the IP address and the IP subnet mask configured in the Network Configuration, IP Configuration, IP Stack Configuration, LAN submenu of the console program are valid for that LAN IP Network Classes Appendix B - IP ConceptsIP Addresses ClassBeginning Address Subnet MaskClass Ending AddressAppendix C - IP Protocol and Port Numbers IP Protocol NumbersIP Port Numbers Appendix D - Technical Specifications GeneralPhysical & Environmental Ventilation Appendix E - Country ID Numbers South AfricaAppendix F - Configuration File Configuration File ExampleDI-308 ISDN Remote Router Index Forward DNS queries to, 76, 77 Forwarding LANIP STACK Dynamic NAPT Static NAPTDynamic NAT Static NAT Talk UNNUMBEROffices Product installed in computer serial No Registration CardProduct installed in type of computer e.g., Compaq Product was purchased from