D-Link DI-1750 Reference Manual page 354

♦ RADIUS authentication examples
♦ RADIUS examples in AAA application
1. Radius Authentication and Authorization Examples
The following example shows how to configure the router to authenticate and authorize using RADIUS:
♦ aaa authentication login use-radius radius local
♦ aaa authentication ppp use-radius if-needed radius
The lines in this sample RADIUS authentication and authorization configuration are defined as follows:
aaa authentication login use-radius radius local command configures the router to use RADIUS for
authentication at the login prompt. If RADIUS returns an error, the user is authenticated using the local
database. In this example, use-radius is the name of the method list, which specifies RADIUS and
then local authentication.
aaa authentication ppp user-radius if-needed radius command configures the router to use
RADIUS authentication for lines using Point-to-Point Protocol (PPP) with CHAP or PAP if the user has
not already been authorized. If the EXEC facility has authenticated the user, RADIUS authentication is
not performed. In this example, user-radius is the name of the method list defining RADIUS as the
if-needed authentication method.
8.2.6 6.2.4.2 Radius Examples In AAA Application
The following example is a general configuration using RADIUS with the AAA command set:
radius server 1.2.3.4
radius key myRaDiUSpassWoRd
username root password AlongPassword
aaa authentication ppp dialins radius local
aaa authentication login admins local
line 1 16
login authentication admins
interface async0/0
encap ppp
ppp authentication pap dialins
The lines in this example RADIUS authentication, authorization, and accounting configuration are
defined as follows:
radius-server command defines the IP address of the RADIUS server.
set-priority-group command defines the shared secret key of network access server and RADIUS
server host.
aaa authentication ppp dialins radius local command defines the authentication method list
"dialins," which specifies that RADIUS authentication, then (if the RADIUS server does not respond)
local authentication will be used.
ppp authentication pap dialins command applies the "dialins" method list to the lines specified.
The aaa authorization network radius local command is used to assign an address and other network
parameters to the RADIUS user.
aaa authentication login admins local command defines another method list, "admins," for login
authentication.
login authentication admins command applies the "admins" method list for login authentication.
Model Name
- 352 -