Patton electronics Access Server, Administrator'S Reference Manual

Page: 53 / 262

Setting Up Authentication 53
Access Server Administrators’ Reference Guide 5 • Authentication
as freeware for most computer platforms and is an excellent method for managing user dial-in security.
Any RADIUS entries will require an associated server to process authentication requests from the access
server or the access server will reject users access. For more information about RADIUS, see RADIUS User
Authentication, below.
• tacacs Users(3)—This feature is not currently available
• static Then RADIUS(4)—Check the internal user database first, if no match is found, then use RADIUS
to authenticate and provision user services.
• static Then Tacacs(5)— Check the internal user database first, if no match is found, then use TACACS to
authenticate and provision user services. Not currently implemented.
Note
The following options apply only when using an external authentica-
tion server.
Host Address (auHostAddress)
Tells the access server the IP address of the primary external authentication server. This must be the IP address
as the access server will not resolve a Fully Qualified Domain Name.
Secondary Host Address (auSecondaryHostAddress)
When using a remote authentication server (RADIUS) this variable provides an alternative server IP address.
Host Port (auHostPort)
This variable tells the access server which UDP port to use when connecting to the host specified in the Host
Address variable. The RADIUS standard, as per RFC 2138, specifies port 1812 for RADIUS authentication.
Some older installations of RADIUS use port 1645.
Timeout (auTimeout)
This option specifies the time, in seconds, before the access server will retransmit an authentication request to
an external authentication server.
Retries (auRetries)
This option specifies the number of times the access server will resend an authentication request to a RADIUS
server after a TIMEOUT occurs. If this number is exceeded then the secondary host will be tried. If this num-
ber is exceeded by the secondary host, the user will be rejected.
Secret (auSecret)
The Secret variable sets the shared secret between the authentication client (access server) and the authentica-
tion server (RADIUS). It is used to encrypt an authentication request and to decrypt an incoming reply from
the server. The secret on the access server and the RADIUS server must match and must be 15 or fewer print-
able, non space, ASCII characters.
Note The same secret word must used on the access server and in the
RADIUS clients file.