SonicWALL TELE3 SP, Руководство администратора

Страница: 198 / 210

Appendices Page 197
4.
Restart the Windows service called Steel Belted RADIUS Service .
5.
Run the Steel Belted RADIUS Administrator .
6.
Click RAS Clients , and select SonicWALL Firewall from the Make/Model list.
Click Save .
Note: If there is no entry for SonicWALL Firewall, be sure that steps 2 and 3 were
performed correctly.
Configuring User Privileges
To configure user privileges, follow these steps:
1.
With Steel Belted RADIUS Administrator open, click Users and select the User
to configure. Or select a profile to be configured from the Profile Name menu.
2.
Click Ins and select SonicWALL-User-Privilege from the Available Attributes
list.
3.
Select the privilege to be set, and click Add . Repeat until all of the privileges are
added for the user.
Steel Belted RADIUS does support CHAP, so authentication takes place even if HTTPS
is not available when logging into the SonicWALL management interface. Select Allow
PAP or CHAP when setting user passwords.
ACE Server from RSA
The ACE Server, version 4.1, from RSA configures RADIUS attributes into the profiles.
It does not support pre-configuration of vendor-specific attributes on the server. It also
only allows one vendor-specific attribute to be set per profile, and only support vendor-
specific attributes containing ASCII text. User privileges are added manually using the
following instructions:
1.
Open the ACE Server Database Administrator program.
2.
Select Edit Profiles from the menu, and select the profile to be configured with
user privileges. Click OK .
3.
From the Available Attributes menu, select Vendor-Specific , and then click
Add Attribute... .
4.
Set the value to 8741 2 “
privileges-list
” where privileges list is a comma-separated
list of 2-letter privileges, as follows:
RA - Remote Access
BF - Bypass Filters
VC - Access from VPN Client