Using Local Database And Radius Server For Authentication - Cisco ISA500 Series Administration Manual

User Management
Configuring the User Authentication Settings
STEP 6
STEP 7
STEP 8
STEP 1
STEP 2
STEP 3
STEP 4
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
• Defualt User Group to Which all RADIUS Users Belong: If the group of a
RADIUS user does not exist in the local database, you can set the RADIUS
user to a specific local user group. Choose a local user group as the default
local group to which the RADIUS user belongs.
In the Test tab, enter the user and password credentials in the User and
Password fields to test the configured RADIUS settings. Click the Test button to
verify whether the RADIUS user is valid
Click OK to save your settings.
Click Save to apply your settings.

Using Local Database and RADIUS Server for Authentication

You can use both the local database and RADIUS server to authenticate the users
who try to access the network.
When you use both the local database and RADIUS server for authentication, the
security appliance first verifies the user name and password information of the
users through the RADIUS server. The RADIUS server returns the authentication
result to the security appliance. For a valid RADIUS user, the security appliance
checks its user group service policy from the local database and allows the user
to access the network. For an invalid RADIUS user, then the security appliance
uses the local database to verify the user. For a valid local user, the security
appliance checks its user group service policy from the local database and allows
the user to access the network. For an invalid local user, the security appliance
denies the user to access the network.
Click Users -> Settings.
The User Settings window opens.
In the User Login Settings area, choose RADIUS + Local Database as the
authentication method from the Authentication Method drop-down list .
Click Configure to configure the RADIUS settings for user authentication.
The RADIUS Settings window opens. To configure the RADIUS server settings for
user authentication, see
Click Save to apply your settings.
Using RADIUS Server for Authentication, page
9
279.
282