Manuals / D-Link / Computer Equipment / Network Router

D-Link DI-308 manual RADIUS Configuration

Models: DI-308

1 131

Download 131 pages 18.9 Kb

Page 80

RADIUS Configuration

DI-308 ISDN Remote Router

RADIUS Configuration

RADIUS is an authentication protocol where passwords are stored on a RADIUS server. RADIUS allows large numbers of passwords to be stored in a centralized location. Before instituting RADIUS, please setup and install a RADIUS server on the LAN.

Items in the above submenu are described as follows:

•RADIUS State – Enables or disables RADIUS. When enabled, all settings in the Dial-in User Profile are disabled.

•Type – Refers to the type of external password protocol. Currently, only RADIUS is supported.

•Server IP Address – This is the IP Address of your Unix- or NT-based RADIUS server.

•Port – The port number for the RADIUS server. The standard port number specified by RFC 1700 is 1812 (shown above).

•Key – This is a shared secret used to identify the router as a valid RADIUS client.

The RADIUS authentication service works for dial-in users only. Thus, when RADIUS is enabled, passwords for dial-in users will no longer be checked in the dial-in user profile. Instead, the authentication request will be passed on to the RADIUS server. Remote networks (routers) dialing into the router will still be authenticated using the remote network profile.

72

Image 80

D-Link DI-308 manual RADIUS Configuration

Contents

DI-308 ISDN Router User’s Guide Rev. 02 AugustFCC Warning CE Mark WarningCopyright Statement TrademarksLimited Warranty D-Link Offices for Registration and Warranty ServiceHardware SoftwareWichtige Sicherheitshinweise Table of Contents INSTALLATIONCONFIGURATION AND MANAGEMENT INTRODUCTIONPROM SYSTEM CONFIGURATION USING TELNETUSING RADIUS AUTHENTICATION APPENDIX A - TROUBLESHOOTINGAPPENDIX D - TECHNICAL SPECIFICATIONS APPENDIX F - CONFIGURATION FILEAPPENDIX C - IP PROTOCOL AND PORT NUMBERS APPENDIX E - COUNTRY ID NUMBERSPage Product Features Ease of InstallationBuilt-in Switch IntroductionRADIUS Remote Authentication Dial in User Service DHCP Support Dynamic Host Configuration ProtocolISDN Leased Line Standard Phone JacksInternet Access Applications for your DI-308What This Manual Covers Data CompressionWhat This Manual Doesn’t Cover Additional Installation Requirements Other ResourcesPacking List This User’s GuideOrdering Your ISDN Line InstallationThe DI-308 Front Panel The DI-308 Rear Panel Telephone Features Installation and Initial ConfigurationA Warning on Connection Cables Step 1 - Setting up the ConsoleStep 2 - Connecting the Console to the Router Using the Console Step 3 - Connecting an ISDN Line to the RouterStep 4 - Connecting a Telephone or Fax Machine to the Router Step 5 - Connecting Ethernet Cables to the RouterImportant Notes on Ethernet Connections Step 6 - Powering Up Devices for Initial Configuration Step 7 - Initial Configuration of the RouterTo log on to the router, use the factory set username and password ‘Admin’ without the quotes. Please note that the user name and password are case-sensitive Step 8 - Configuring the LAN Port Choose Interface Configuration, LANChoose Network Configuration, IP Configuration From the Main Menu choose Advanced FunctionsStep 9 - Plugging in All Devices Configuration and Management Console Program Main MenuSystem Information This menu contains administrative and system-related informationThe Main Menu is shown below The above parameters are described as followsInterface Configuration Operation Mode - The LAN port is Auto Negotiation only State - This is a toggle to Enable or Disable the LAN interfaceThe parameters are described below ISDN Network Configuration IP Configuration IP Stack ConfigurationBelow, the submenus for both the LAN and ISDN interfaces are shown DI-308 ISDN Remote RouterThe parameters are described below change to an adjacent router. The adjacent router must be using the same protocol. Setting this to RIPV1&V2 will give the router the ability to make routing information exchanges with any adjacent router IP Static Route Router Advertisement SNMP Agent ConfigurationIP Networking SNMP Community Configuration SNMP Trap Manager SNMP Authenticated Trap Advanced FunctionsRemote Access Configuration Remote Operation Overview Dial-In User ConnectionsRemote Network Connections Dial-In Network ConnectionsWhen a packet on the LAN reaches the router, the DI-308 will DI-308 ISDN Remote Router Dial Configuration Dial In IP PoolThe items are described as follows Dial-In User Profile Press Enter to access the submenu that appears below Password - This is the password associated with the above Name fieldThe parameters in the above window are described as follows DI-308 ISDN Remote RouterPhone Number Supplied by - Toggle between Router and Caller Remote Network ProfilePress Enter to access the submenu that appears below Incoming DHCP Configuration OutgoingDHCP Server Configuration Dynamic IP Pool Static IP Pool DHCP Relay Agent Filter Configuration Configuring a Filter SetFilter State of Interface Layer 2 Filter DI-308 ISDN Remote Router Press Enter to access the following screenThe parameters of a filter are described below IP Filter DI-308 ISDN Remote Router Press Enter to access the following screenThe IP Filter parameters are described below 3. Disable - This does not apply the IP filter Multiple Home Configuration Static ARP Press Enter to access the following screen State - This toggles enable or disableThe parameters are described as follows DI-308 ISDN Remote RouterNAT Configuration How NAT WorksRouter NAT Page Setting Local IP Addresses NAT/NAPTClass Beginning AddressThe configuration screen for the name field appears as follows Dynamic NAT NAT IP Pool Configuration ScreenDynamic NAPT Static NAT Static NAPT Configure NAPT for Special Applications The fields in the above window are described as follows Start Port - Some applications can only send data over a certain range of port numbers. Thus, all port numbers in the specified range must be exempt from the NAPT port translation process. This field defines the beginning range of the port numbers to be exempted from the NAPT port translation process Telnet/Discovery Enable DNS ConfigurationHost Table State - Enables or disables entry Items are described as follows IP - The IP address for the hostHost Name - The host name used by the host DI-308 ISDN Remote RouterRADIUS Configuration Multi-Link PPP Configuration Bandwidth on Demand - Enables or disables BOD. When enabled, BOD will manage the implementation of MLPPP using the parameters defined in this window Admin Configuration System MaintenanceSystem Status StatisticsTx Discard Packets - The number of packets dropped by the router LAN Counter TableTx Bytes - The total number of bytes transmitted by the router Rx Packets - The number of valid packets received by the router ISDN Counter Table Runtime Tables IP Routing TableHops - This is the remaining hop-count ARP Table PPP TableLog and Trace View Log File Event/Error LogLog Configuration Trace Buffer Trace Buffer Configuration Enables or disables the Trace Buffer featureThe contents are described as follows Direction - The incoming or outgoing connection directionView Trace Buffer Packet Triggered Last CallThis feature tests a dial-out ISDN connection DiagnosticConnection Test IP Ping Test Loopback Test DI-308 ISDN Remote Router Press Enter to access the next screenStart Test - press Enter or Return to begin the test System LAN Test System ISDN TestSoftware Update System RestartFactory Reset System Settings Backup/Restore Items in the windows above and below include DI-308 ISDN Remote Router PROM System Configuration MAC Address - This is the physical address for this router System ConfigurationThe parameters are described as follows TCP/IP Parameters Configuration System ResetA system reset will not affect the router’s settings, but will clear all tables including the routing table and all SNMP counters and tables. It is also used to initiate a software update Software UpdateSoftware Update Control - This toggles Disable and Enable DI-308 ISDN Remote Router EEPROM Factory ResetExecute Bootload Using Telnet Telnet ConfigurationUsing Telnet via LAN Using Telnet via ISDNSystem Timeout Configuring the DI-308 for RADIUS Authentication Using RADIUS AuthenticationInstalling a RADIUS Server Adding Users to the RADIUS Database Ip user Password = “iusespecificip”, FramedIPAddress =# Client Name 192.168.0.1Appendix A - Troubleshooting Some Common Problems with the DI-308Problems With the ISDN Line Problems with the LAN Interface3. Verify with your network administrator that the IP address and the IP subnet mask configured in the Network Configuration, IP Configuration, IP Stack Configuration, LAN submenu of the console program are valid for that LAN Appendix B - IP Concepts IP AddressesIP Network Classes ClassSubnet Mask ClassBeginning Address Ending AddressIP Port Numbers Appendix C - IP Protocol and Port NumbersIP Protocol Numbers Physical & Environmental Appendix D - Technical SpecificationsGeneral Ventilation Appendix E - Country ID Numbers South AfricaAppendix F - Configuration File Configuration File ExampleDI-308 ISDN Remote Router Index Forward DNS queries to, 76, 77 Forwarding LANDynamic NAT Static NAT IP STACKDynamic NAPT Static NAPT Talk UNNUMBEROffices Registration Card Product installed in type of computer e.g., CompaqProduct installed in computer serial No Product was purchased from