Raritan DOMINION SX -, User Manual

Page: 206 / 226

188 D
OMINION
SX U
SER
G
UIDE
Create an IAS Policy
The following section describes the steps to create a policy to allow Radius users to access the
Dominion SX. The example in this section requires two conditions, the client source IP address of
the Dominion SX and the UserID is a member of the SX User Group:
•
NAS-IP-Address = Type the IP address of Dominion SX
•
Windows-Group = SX User Group
Note: If you have multiple Dominion SX units or different models of Dominion product
family (DKX, DKSX or KX101) then using an appropriate condition to match (NAS-IP-
Address) rule will help apply the correct policy for the appropriate Dominion unit.
1. From
Internet Authentication Service,
right-click on
Remote Access Policies
and
select
New Remote Access Policy
.
2. The New Remote Policy Wizard starts. Click
Next>
.
3. Select the
Set up a custom policy
radio button and type a
Policy
name.
4. The Policy Conditions dialog appears. Click the
Add...
button.
5. Select the
NAS-IP-Address
name and click the
Add...
button. Type the IP address of the
Dominion SX unit.
6. Type a second condition using the name
Windows-Group
and the value
SX User
Group
. Click
Next>
.
7. Select the
Grant remote access permission
radio button.
8. Click
Next>
. The Profile dialog appears..
9. Click the
Edit Profile...
button.
10. Select the
Authentication
tab. Remove other checkmarks and add a checkmark to enable
Unencrypted authentication (PAP, SPAP)
Note: This version of Dominion SX does not support Challenge Authentication Protocol
(CHAP).
11. Select the
Advanced
tab. Remove
Framed-Protoco
l.
Note: Each policy has conditions that must be met. If the conditions are not met then IAS
goes to the next policy and examine the conditions.
12. Click the
Add...
button. The RADIUS attributes list appears.
13. Select
Filter-Id Name
and click the
Add
button. Click on
Add
in the Attribute values
section. Type the attribute value,
Raritan:G{Admin}
.
14. Click
OK
.
The value in G{} is the name of a group locally on the DSX, in this case the default
Admin group.
•
The value can be Raritan:G{Admin}:D{1234567890} if you are using the dial
back feature, where 1234567890 is the phone number for dial back.
•
The value Raritan:G{Admin} must match with the local group on the Dominion
SX.
•
The Dominion SX comes from the factory with the default Admin group.
•
Additional user groups can be created on Dominion SX unit by using the
User
Management>User Group
option.
•
Appropriate port access and user class (Operator or Observer) can be defined.
The group name should be specified in the Filter-Id attribute value accordingly in
order to authorize the RADIUS user to access the Dominion SX unit