Technical Documentation

Configuring an Infranet Controller RADIUS Server Instance (NSM Procedure)

A Remote Authentication Dial-In User Service (RADIUS) server allows you to centralize authentication and accounting for remote users. When using a RADIUS server to authenticate Infranet Controller users, you need to configure it to recognize the Infranet Controller as a client and specify a shared secret for the RADIUS server.

To configure a connection to the RADIUS server on the Infranet Controller:

  1. In the NSM navigation tree, select Device Manager> Devices.
  2. Click the Device Tree tab, and then double-click the Infranet Controller for which you want to configure a RADIUS server instance.
  3. Click the Configuration tab. In the configuration tree, select Authentication > Auth Servers.
  4. Add or modify RADIUS server settings as specified in Table 1.
  5. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modifications.

Table 1: RADIUS Server Configuration Details

Option Function Your Action

Auth Server Name

Specifies a name for the auth server.

Enter a name for the auth server.

Auth Server Type

Specifies the auth server type.

Select Radius Server.

Radius Settings > Primary Server tab

Radius Server

Specifies a unique name or IP address for the RAIDUS server.

Enter the name or IP address.

NAS-Identifier

Specifies a name for the network access server (NAS) client, which communicates with the RADIUS server.

Enter the name for the NAS client.

Authentication Port

Specifies the authentication port value for the RADIUS server.

Enter the port value.

Note: Typically this port is 1812, but some legacy servers might use 1645.

Shared Secret

Specifies the shared secret.

Enter the shared secret.

Accounting Port

Specifies the accounting port value for the RADIUS server.

Enter the port value.

Note: Typically this port is 1813, but some legacy servers might use 1646.

NAS-IP-Address

Specifies the NAS IP address value passed to RADIUS requests.

Enter the NAS IP address.

Timeout (minutes)

Specifies the time interval for the Infranet Controller to wait for a response from the RADIUS server before timing out the connection.

Enter the timeout interval in minutes.

Retries

Specifies the number of retries an Infranet Controller can make after the first connection attempt fails.

Enter the number of retries.

Users authenticate using tokens or one-time passwords

Specifies that the password entered by the user cannot be submitted to other SSO enabled applications.

Select the Users authenticate using tokens or one-time passwords check box.

Radius Settings > Backup Server tab

Backup Radius Server

Specifies a secondary RADIUS server for the Infranet Controller to use if the primary server (the one defined in this instance) is unreachable.

Enter a secondary RADIUS server name or IP address.

Backup Authentication Port

Specifies the authentication port for the backup RADIUS server.

Enter the port value.

Backup Shared Secret

Specifies the string for the shared secret.

Enter a string for the shared secret.

Backup Accounting Port

Specifies the accounting port for the backup RADIUS server.

Enter the port value.

Radius Settings > Radius Accounting tab

User-Name

Specifies the user information that the Infranet Controller should send to the RADIUS accounting server.

Enter the user information.

The default variables for this field are:

  • <username>—Logs the user’s Infranet Controller username to the accounting server.
  • <REALM>— Logs the user’s Infranet Controller realm to the accounting server.
  • <ROLE>— Logs the user’s Infranet Controller role to the accounting server. If the user is assigned to more than one role, the Infranet Controller comma separates them.

Interim Update Interval (minutes)

Specifies an interim update interval that enables precise billing for long-lived session clients and in case of a network failure.

Enter the time.

Use NC assigned IP Address for FRAMED-IP-ADDRESS attribute

Specifies that the IP address returned from the Infranet Controller is used for the framed-IP-address attribute.

Select the Use NC assigned IP Address for FRAMED-IP-ADDRESS attribute check box.

Server Catalog > Expressions tab

Name

Specifies a name for the user expression in the RADIUS server user directory.

Enter a name for the user expression.

Value

Specifies a value for the user expression in the RADIUS server user directory.

Enter a value for the user expression.

Server Catalog > Attributes tab

Name

Specifies a name for the user attribute in the RADIUS server user directory.

Enter a name for the user attribute.


Published: 2009-08-20