RSA Security RSA RADIUS Server 6.1, Administrator'S Manual, Page: 17 / 118

RSA RADIUS Server 6.1 Administrator’s Guide About RSA RADIUS Server 5
Each RADIUS packet supports a specific purpose: authentication or accounting.
A packet can contain values called
attributes . The attributes found in each packet
depend upon the type of packet (authentication or accounting) and the device
that sent it (for example, the specific make and model of the RAS device acting as
a RADIUS client).
For information on RADIUS authentication packet structures and attributes, see
RFC 2865,
Remote Authentication Dial In User Service (RADIUS) . For information
on RADIUS accounting packet structures and attributes, see RFC 2866, RADIUS
Accounting .
RADIUS Configuration
You must configure a RADIUS client and a RADIUS server before they can
communicate. If the client and server are on the same network, one administrator
might be able to configure both sides of the RADIUS communication. If the
client and server are on different networks, you might have to coordinate
RADIUS configuration details with the administrators of other networks.
RADIUS Server Configuration
You must configure how a RADIUS server responds to each of its clients. To
configure the RSA RADIUS Server, run the RSA RADIUS Administrator,
(described in
“Running RSA RADIUS Administrator” on page 35 ), open the
RADIUS Clients panel (described in “RADIUS Clients Panel” on page 45 ), and
enter the following information for each RADIUS client:
X
The IP address of the client device.
X
The authentication shared secret used by RSA RADIUS Server and the client
device. For information on RADIUS shared secrets, see
“Shared Secrets” on
page 6 .
X
The make and model of the client device, selected from a list of devices that
RSA RADIUS Server supports. If a specific make and model is not listed,
choose
- Standard Radius -
.
RADIUS Client Configuration
You must configure each RADIUS client to contact its RADIUS server. To
configure a client to work with an RSA RADIUS Server, log on to the client
device, run its administration program, and enter the following information:
X
The IP address of the RSA RADIUS Server.