Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 451 / 1026

•
Attribute Number—The attribute number identifies an individual vendor-specific
attribute.
• Attribute Type—The attribute type identifies the form in which attribute data (or “
value” ) appears—a string, an IP address, or an integer.
The RADIUS server automatically receives the above information when you load the
Juniper Networks dictionary file onto it. To make new data entries, you must manually
enter a value in the form indicated by the attribute type.
Example: Configuring a Radius Auth Server
In the following example, you define an auth server object for a RADIUS server. You specify
its user account types as auth, L2TP, and XAuth. You name the RADIUS server “ radius1”
and accept the ID number that the security device automatically assigns it. You enter its
IP address, which is 10.20.1.100; and change its port number from the default port number
(1645) to 4500. You define its shared secret as “ A56htYY97kl” . You change the
authentication timeout value from the default (10 minutes) to 30 minutes and the RADIUS
retry timeout from 3 seconds to 4 seconds. You also assign its two backup servers the
IP addresses 10.20.1.110 and 10.20.1.120.
In addition, you load the Juniper Networks dictionary file on the RADIUS server so that it
can support queries for the following vendor-specific attributes (VSAs): user groups,
administrator privileges, remote L2TP and XAuth settings.
1.
In the main navigation tree, select Object Manager > Authentication Servers and
click the Add icon. Enter a name, color, and comment for the authentication server.
2.
Configure the RADIUS servers:
• For Main Server, enter the IP 10.20.1.100
•
For Primary Backup Server, enter IP 10.20.1.110
•
For Secondary Backup Server, enter IP 10.20.1.120
3.
For timeout, enter 30 .
4.
Select the following:
• For Firewall Auth Users
•
For XAuth Users
•
For L2TP Users
5.
For Server Type, select RADIUS .
6.
Configure the RADIUS server properties:
401 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects