LEGRAND Raritan PX3TS, Руководство пользователя

Страница: 812 / 911

792
This section provides illustrations for configuring RADIUS authentication. One
illustration is based on the Microsoft
®
Network Policy Server (NPS), and the
other is based on a FreeRADIUS server.
The following steps are required for any RADIUS authentication:
1. Configure RADIUS authentication on the PX3TS. See Adding Radius Servers
(on page 365).
2. Configure roles on the PX3TS. See Creating Roles (on page 302).
3. Configure PX3TS user credentials and roles on your RADIUS server.
▪
To configure using standard attributes, see Standard Attributes (on
page 792).
▪
To configure using vendor-specific attributes, see Vendor-Specific
Attributes (on page 811).
Note that we assume that the NPS is running on a Windows 2008 system in the
NPS illustrations.
In This Chapter
Standard Attributes .......................................................................................... 792
Vendor-Specific Attributes ............................................................................... 811
AD-Related Configuration ................................................................................. 824
Standard Attributes
The RADIUS standard attribute "Filter-ID" is used to convey the group
membership, that is, roles.
•
If a user has multiple roles, configure multiple standard attributes for this
user.
•
The syntax of a standard attribute is:
Raritan:G{role-name}
For configuration on NPS, see NPS Standard Attribute Illustration (on page
792).
For configuration on FreeRADIUS, see FreeRADIUS Standard Attribute
Illustration (on page 810).
NPS Standard Attribute Illustration
To configure Windows 2008 NPS with the standard attribute , you must:
a. Add your PX3TS to NPS. See Step A: Add Your PX3TS as a RADIUS Client
(on page 793).
Appendix I RADIUS Configuration Illustration