Fortress Bridge: Configuration
43
The default Auth Server Key is fortress, which you can
optionally change.
Selecting Local authentication enables the screens and fields
that configure local authentication settings for both users and
devices.
NOTE: The Bridge
has not been test-
ed with, and may not
fully support, other
common RADIUS serv-
ers. Contact your For-
tress representative for
more detail about third-
party RADIUS support.
3.6.6.3 External Authentication Server
The Bridge can be integrated with an external Remote
Authentication Dial-In User Service (RADIUS). It supports the
open source freeRADIUS.
Also, in a point-to-point or point-to-multipoint Bridge
deployment that uses the RADIUS server internal to the root
Bridge for authentication, only the root Bridge is configured for
Local authentication, while the other Bridge(s) in the network
are configured to use the root Bridge’s RADIUS server as an
External authentication server.
The screens and fields that configure local authentication
settings for users and devices are disabled when External
authentication is selected. (These settings are configured on
the external authentication server.)
NOTE: If you are
using both RADI-
US and 802.1X authenti-
cation services, they can
run on the same exter-
nal server, but you must
enter the server’s set-
tings both on the
SECURI-
TY SETTINGS screen (in
the AUTHENTICATION SET-
TINGS section) and on the
INTERFACES screen (in the
802.1X AUTHENTICATION
SERVER frame).
To use the Bridge with an external RADIUS server, the Bridge
must be added as a RADIUS Network Access Server (NAS)
client and assigned a shared key for communication with
RADIUS. Please refer to your RADIUS documentation for
guidance.
To configure an external RADIUS server:
NOTE: The server
key you enter here
should already be
present in the RADIUS
service configuration.
1Log on to the Bridge GUI admin account and select
SECURITY SETTINGS from the menu on the left.
2In the AUTHENTICATION SETTINGS frame:
Ensure that Auth Mode is External.
In Auth Server Address, enter the IP address of your
external RADIUS server.
In Auth Server Key, enter the shared key assigned to the
Bridge in RADIUS.
In Confirm Server Key, re-enter the shared key (to guard
against entry errors).
3Click Apply at the bottom of the screen.
detail: