87
TERMINAL SERVERS
4.14.1 I
MPLEMENTING
RADIUS A
UTHENTICATION
The Terminal Server must be configured with the parameter of at least one
(primary) RADIUS server in order to use the RADIUS authentication. The
following example configures the Terminal Server to use RADIUS:
1 Local> DEFINE AUTHENTICATION PRIMARY ADDRESS 133.144.155.166
Local> DEFINE AUTHENTICATION ALTERNATE ADDRESS 133.144.155.177
Local> DEFINE AUTHENTICATION RETRIES 3
2 Local> DEFINE AUTHENTICATION PRIMARY SECRET my-secret
3 Local> DEFINE PORT 1 AUTHENTICATION ENABLED
4 Local> DEFINE AUTHENTICATION ENABLED
Figure 4-30. Setting Up RADIUS Authentication.
1: Primary and Alternate RADIUS Authentication Server Configuration
The Terminal Server must be configured with a valid RADIUS server IP
address and a shared secret. Statements 1 define the Internet addresses of two
valid RADIUS servers, primary and alternate, at least one of which must be
accessible for authentication of users. The third command line specifies that
the Terminal Server should retry sending an authentication request three
times to the primary RADIUS server. After this, it either turns to an alternate
RADIUS server (if defined) or rejects the login request.
Statement 2 defines the shared secret that is known to both the RADIUS
client (in this case, the Terminal Server) and the RADIUS server. The secret
should be entered into the RADIUS “clients” database file in the following
format:
133.144.155.166
my-secret
2: Enabling RADIUS Authentication
Summary of Contents for LE2101A-BT-R2
Page 2: ......
