Raritan DOMINION SX -, Инструкция по установке и эксплуатации

Страница: 118 / 172

108 D
OMINION
SX I
NSTALLATION AND
O
PERATIONS
M
ANUAL
−
If the RADIUS Server is not configured for Vendor-Specific type or it fails to follow the above
specifications, the value specified for the Service-Type will determine the privileges to be given to
the user. In this case, the user will be given access to all the ports. Our RADIUS clients build
inside the Dominion SX unit the following attributes and maps them in the following order:
VALUE ATTRIBUTE NAME VALUE NAME /TYPE DESCRIPTION
6 Service-Type What type of Service the user receives?
1) Login Maps to observer
2) Framed Maps to observer
3) Callback Login Maps to observer
4) Callback Framed Maps to observer
5) Administrative Maps to an administrator
6) NAS prompt Maps to an operator
7)Callback NAS prompt Maps to an observer
Note : For more information and examples, please see Step E. in the Install and Configure the RADIUS
Server for Windows 2000 section that follows.
Install and Configure the RADIUS Server for Windows
2000
A. Install IAS (Internet Authorization Service)
1. Insert the Windows 2000 Server compact disc and start the Setup program.
2. Click Install Add-On Components , and then click Add/Remove Windows Components .
3. In Components, click Networking Services (but do not select or clear its check box), and then click
Details .
4. Select the Internet Authentication Service check box and click on the [ OK ] button.
5. Click on the [ Next ] button.
B. Configure IAS Port Information
1. To configure a remote IAS server, you must have administrative privileges on the remote server.
2. Open IAS: select Start
→
Programs
→
Administrative Tools
→
Internet Authentication Service .
3. Right-click on Internet Authentication Servic e and select Properties from the drop-down menu.
4. Click on the RADIUS tab, and examine the settings for ports. If your RADIUS authentication and
RADIUS accounting UDP ports differ from the default values provided (1812,1645 for authentication
and 1813,1646 for accounting), in
Authentication and Accounting , type your port settings. The
values of 1812 for authentication and 1813 for accounting are the RADIUS standards at this time.
However, many network access servers use port 1645 for authentication requests and 1646 for
accounting requests by default. To use multiple port settings for authentication or accounting requests,
separate the ports by using commas.
C. Configure Event Logging for IAS
1. Open IAS.
2. Right-click on Internet Authentication Service and select Properties from the drop-down menu.
3. Click on the Service tab and select each option that is appropriate.
4. Click on the [ OK ] button.
Note : Selecting Log successful authentication requests can result in extremely large amounts of data
being logged. Before selecting this option, verify that the Event Viewer is configured with a maximum log
size that will accommodate this type of event logging.