Watchguard Firebox X15 User Manual page 215

Enable RADIUS authentication
When you enable RADIUS authentication, you define one authentication server and its properties. When you
set up your RADIUS server, you must make sure that, when it sends a message to the Firebox that a user is
authenticated, it also sends a FilterID string, for example "engineeringGroup" or "financeGroup". The FilterID
is RADIUS attribute 11. This information is then used for access control; it must match the Account Name of a
group configured on the Firebox Users page.
To enable RADIUS authentication:
1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firebox Users > Settings. Click the RADIUS tab.
The Firebox Users Settings page appears.
3. To enable the RADIUS server and enable the fields on this dialog box, select the Enable RADIUS
authentication check box.
4. In the RADIUS server IP address text box, type the IP address of your RADIUS server.
5. In the RADIUS server port text box, make sure that the port number RADIUS uses for authentication
appears. The default port number is 1812. Older RADIUS servers might use port 1645.
6. In the RADIUS server secret text box, type the shared secret between the Firebox and the RADIUS
server. The shared secret is case-sensitive ad must be the same on the Edge and the RADIUS server.
7. To set the timeout value, use the Timeout value control to set the value you want. The timeout value
is the amount of time the Edge waits for a response from the authentication server before it tries to
connect again.
8. To test whether the Firebox can successfully connect to the RADIUS server to verify a user credentials,
click the Test RADIUS Account button.
9. Click Submit.
User Guide
in the browser address bar, and the IP address
https://
User and Group Management
203