Juniper NETWORK AND SECURITY MANAGER NSM3000 - REV 1, Руководство пользователя

Страница: 67 / 100

Figure 29: DNS Client Options
Host Addresses
Use this option to manage host addresses, See Figure 30 on page 47.
Figure 30: Host Address
Managing RADIUS Servers
The NSM appliance WebUI supports authentication of users defined in the RADIUS
servers, in addition to authentication of locally defined admin users.
When a user logs into the NSM appliance using the WebUI, the software first checks the
UNIX user database and then the WebUI user database to authenticate the user. If the
user is not a locally defined admin user, the software contacts the RADIUS servers added
to the RADIUS server list in the Web UI to authenticate the user. The RADIUS servers are
contacted in the order of priority set in the RADIUS server list. If any of the RADIUS servers
authenticates the user, the user is logged in with the privileges that are associated with
the user profile. If none of the servers authenticates the user, the user login fails.
NOTE: The NSM appliance must be configured as a RADIUS client on a
RADIUS server so that the RADIUS server responds to authentication requests
from the appliance. Select any Juniper Make or Model in the Make/Model
field while adding an NSM appliance as a RADIUS client. You will need to
update the Juniper dictionary file (juniper.dct) in the RADIUS server with the
Juniper defined Vendor-Specific Attribute (VSA) for the NSM
appliance:
ATTRIBUTE Juniper-Nsmxpress-Profile Juniper-VSA(6, string) r
. You also need to add NSM appliance users with their associated user profiles
(SysAdmin, NSMAdmin, Operator, Guest), to the RADIUS database. For more
details see Steel-Belted Radius Documentation.
NOTE: You need System Administration or NSM Administration permission
to manage RADIUS servers in the NSM appliance WebUI.
47 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring NSM from the Web Interface