ProSafe VPN Firewall 200 FVX538 Reference Manual

.

Figure 5-28

3.Enter the Primary RADIUS Server IP address.

4.Enter a Secret Phrase. Transactions between the client and the RADIUS server are authenticated using a shared secret phrase, so the same Secret Phrase must be configured on both client and server.

5.Enter the Primary Server NAS Identifier (Network Access Server). This Identifier MUST be present in a RADIUS request. Ensure that NAS Identifier is configured as the same on both client and server.

The FVX538 is acting as a NAS (Network Access Server), allowing network access to external users after verifying their authentication information. In a RADIUS transaction, the NAS must provide some NAS Identifier information to the RADIUS Server. Depending on the configuration of the RADIUS Server, the router's IP address may be sufficient as an identifier, or the Server may require a name, which you would enter here. This name would also be configured on the RADIUS Server, although in some cases it should be left blank on the RADIUS Server.

6.Enable a Backup RADIUS Server (if required) by following steps 2 through 5.

7.Set the Time Out Period, in seconds, that the router should wait for a response from the RADIUS server.

8.Set the Maximum Retry Count. This is the number of tries the router will make to the RADIUS server before giving up.

5-36

Virtual Private Networking

v1.0, August 2006

Page 138
Image 138
NETGEAR FVX538NA manual Enter the Primary Radius Server IP address