Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01, Manual

Page: 65 / 104

Figure 28: DNS Client Options
Host Addresses
Use this option to manage host addresses, See Figure 29 on page 45.
Figure 29: Host Address
Managing RADIUS Servers
The NSMXpress Series II WebUI supports authentication of users defined in the RADIUS
servers, in addition to authentication of locally defined admin users.
When a user logs into NSMXpress Series II using the WebUI, the software first checks the
UNIX user database and then the WebUI user database to authenticate the user. If the
user is not a locally defined admin user, the software contacts the RADIUS servers added
to the RADIUS server list in the Web UI to authenticate the user. The RADIUS servers are
contacted in the order of priority set in the RADIUS server list. If any of the RADIUS servers
authenticates the user, the user is logged in with the privileges that are associated with
the user profile. If none of the servers authenticates the user, the user login fails.
NOTE: NSMXpress Series II must be configured as a RADIUS client on a
RADIUS server so that the RADIUS server responds to authentication requests
from appliance. Select any Juniper Make or Model in the Make/Model field
while adding NSMXpress Series II as a RADIUS client. You will need to update
the Juniper dictionary file (juniper.dct) in the RADIUS server with the Juniper
defined Vendor-Specific Attribute (VSA) for NSMXpress Series II:
ATTRIBUTE
Juniper-Nsmxpress-Profile Juniper-VSA(6, string) r . You also need to add
NSMXpress Series II users with their associated user profiles (SysAdmin,
NSMAdmin, Operator, Guest), to the RADIUS database. For more details see
Steel-Belted Radius Documentation.
NOTE: You need System Administration or NSM Administration permission
to manage RADIUS servers in the NSMXpress Series II WebUI.
45 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring NSM from the Web Interface