Fortress Bridge: Configuration
42
selected and, in the case of device authentication, when it has
been globally enabled in the AUTHENTICATION SETTINGS frame of
the SECURITY SETTINGS screen. These screens are described in
Section 4.1 (Device Authentication) and Section 4.2 (User
Authentication), in the next chapter.
3.6.6.1 Enabling/Disabling Authentication Globally
The Fortress Bridge has an internal RADIUS server built-in.
The Bridge additionally supports an external RADIUS server.
Authentication (device and user) is disabled/enabled globally
on the Bridge by selecting Disabled, Local or External in the
AUTHENTICATION SETTINGS frame of the SECURITY SETTINGS
screen.
NOTE: If you are
using the
RADIUS
server internal to a
Bridge in a point-to-
point or point-to-multi-
point deployment, con-
figure the root Bridge to
use Local authentica-
tion. Then configure the
non-root Bridge(s) to
use External authentica-
tion and their
AUTHENTI-
CATION SETTINGS to point
to the root Bridge.
To enable/disable all authentication:
1Log on to the Bridge GUI admin account and select
SECURITY SETTINGS from the menu on the left.
2In the AUTHENTICATION SETTINGS frame, in the Mode field,
select one of:
Disabled - disables authentication (the default)
Local - enables authentication through the Bridge’s
internal RADIUS server (and enables local
configuration of authentication settings)
External - enables authentication through an external
RADIUS server (and disables local configuration of
authentication settings)
3Click Apply at the bottom of the screen.
4If you selected Disabled or Local, skip this step.
or
If you selected External, go on to the instructions in Section
3.6.6.3, to configure an external RADIUS server.
3.6.6.2 Local Authentication Server
NOTE: Device au-
thentication is
supported only for Lo-
cal authentication.
Because the Fortress Bridge’s RADIUS server is built in, once
you have chosen Local authentication, no further server
configuration is required, and the field that configures the
external authentication server’s IP address is grayed out to
reflect your choice.
The RADIUS server internal to the Fortress Bridge
automatically adopts the shared key configured on the Bridge.
detail: