User
RADIUS
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
573
•
Figure 377: RADIUS server configuration
Dynamically assigning VPN client IP addresses from a RADIUS record
SSL VPN tunnel mode, IPSec, and PPTP VPN sessions can assign IP addresses to
remote users by getting the IP address to assign to the user from the Framed-IP-Address
field in the RADIUS record received when the RADIUS server confirms that the user has
authenticated successfully. See
and
for more information about
RADIUS.
Name
Enter the name that is used to identify the RADIUS server on the
FortiGate unit.
Primary Server Name/IP
Enter the domain name or IP address of the primary RADIUS server.
Primary Server Secret
Enter the RADIUS server secret key for the primary RADIUS server.
The primary server secret key should be a maximum of 16
characters in length.
Secondary Server Name/IP
Enter the domain name or IP address of the secondary RADIUS
server, if you have one.
Secondary Server Secret
Enter the RADIUS server secret key for the secondary RADIUS
server. The secondary server secret key should be a maximum of 16
characters in length.
Authentication Scheme
Select Use Default Authentication Scheme to authenticate with the
default method. The default authentication scheme uses PAP, MS-
CHAP-V2, and CHAP, in that order.
Select Specify Authentication Protocol to override the default
authentication method, and choose the protocol from the list: MS-
CHAP-V2, MS-CHAP, CHAP, or PAP, depending on what your
RADIUS server needs.
NAS IP/Called Station ID
Enter the NAS IP address and Called Station ID (for more
information about RADIUS Attribute 31, see RFC 2548 Microsoft
Vendor-specific RADIUS Attributes). If you do not enter an IP
address, the IP address that the FortiGate interface uses to
communicate with the RADIUS server will be applied.
Include in every User Group
Select to have the RADIUS server automatically included in all user
groups.
Summary of Contents for Gate 60D
Page 705: ...www fortinet com...
Page 706: ...www fortinet com...
