LEGRAND Raritan SRC-0100, User Manual

Page: 614 / 698

602
This section provides illustrations for configuring RADIUS authentication.
One illustration is based on the Microsoft
®
Network Policy Server (NPS),
and the other is based on a FreeRADIUS server.
The following steps are required for any RADIUS authentication:
1. Configure RADIUS authentication on the SRC. See
Adding Radius
Servers (on page 226).
2. Configure roles on the SRC. See
Creating Roles
(on page 162).
3. Configure SRC user credentials and roles on your RADIUS server.

To configure using standard attributes, see Standard Attributes
(on page 601).

To configure using vendor-specific attributes, see
Vendor-Specific Attributes (on page 620).
Note that we assume that the NPS is running on a Windows 2008 system
in the NPS illustrations.
In This Chapter
Standard Attributes ................................................................................. 601
Vendor-Specific Attributes ...................................................................... 620
AD-Related Configuration ....................................................................... 633
Standard Attributes
The RADIUS standard attribute "Filter-ID" is used to convey the group
membership, that is, roles.

If a user has multiple roles, configure multiple standard attributes
for this user.

The syntax of a standard attribute is:
Raritan:G{role-name}
For configuration on NPS, see
NPS Standard Attribute Illustration
(on
page 601).
For configuration on FreeRADIUS, see
FreeRADIUS Standard Attribute
Illustration
(on page 619).
NPS Standard Attribute Illustration
To configure Windows 2008 NPS with the standard attribute, you must:
a. Add your SRC to NPS. See Step A: Add Your SRC as a RADIUS
Client
(on page 602).
Appendix H RADIUS Configuration Illustration