NETGEAR FVS318N manual 242, Backup Radius Server, Connection Configuration

ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N

Table 56. RADIUS Client screen settings (continued)

Setting	Description
Secret Phrase	A shared secret phrase to authenticate the transactions between the client
	and the primary RADIUS server. The same secret phrase needs to be
	configured on both the client and the server.
Primary Server NAS	The primary Network Access Server (NAS) identifier that needs to be present
Identifier	in a RADIUS request.
	Note: The wireless VPN firewall functions as an NAS, allowing network
	access to external users after verification of their authentication information.
	In a RADIUS transaction, the NAS needs to provide some NAS identifier
	information to the RADIUS server. Depending on the configuration of the
	RADIUS server, the wireless VPN firewall’s IP address might be sufficient as
	an identifier, or the server might require a name, which you need to enter in
	this field.
Backup RADIUS Server

To enable and configure the backup RADIUS server, select the Yes radio button, and then enter the settings for the three fields to the right. The default setting is that the No radio button is selected.

Backup Server IP Address	The IPv4 address of the backup RADIUS server.
Secret Phrase	A shared secret phrase to authenticate the transactions between the client
	and the backup RADIUS server. The same secret phrase needs to be
	configured on both the client and the server.
Backup Server NAS	The backup Network Access Server (NAS) identifier that needs to be present
Identifier	in a RADIUS request.
	Note: See the note earlier in this table for the Primary Server NAS Identifier.
Connection Configuration
Time out period	The period in seconds that the wireless VPN firewall waits for a response from
	a RADIUS server. The default setting is 30 seconds.
Maximum Retry Counts	The maximum number of times that the wireless VPN firewall attempts to
	connect to a RADIUS server. The default setting is 4 retry counts.

3.Click Apply to save your settings.

Note: You can select the RADIUS authentication protocol (PAP or CHAP) on the Edit IKE Policy screen or Add IKE Policy screen (see Configure XAUTH for VPN Clients on page 239).

Virtual Private Networking Using IPSec and L2TP Connections

242