User Database Configuration; Radius Client Configuration - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

Table 5-13.
Extended Authentication
Item
Username
Password
4. Click Apply to save your settings.

User Database Configuration

When XAUTH is enabled in an Edge Device configuration, users must be authenticated either by a
local user database account or by an external RADIUS server. Whether or not you use a RADIUS
server, you might want some users to be authenticated locally. These users must be added to the
List of Users table on the Users screen, as described in

RADIUS Client Configuration

Remote Authentication Dial In User Service (RADIUS, RFC 2865) is a protocol for managing
authentication, authorization, and accounting (AAA) of multiple users in a network. A RADIUS
server stores a database of user information, and can validate a user at the request of a gateway or
server in the network when a user requests access to network resources. During the establishment
of a VPN connection, the VPN gateway can interrupt the process with an XAUTH request. At that
point, the remote user must provide authentication information such as a user name and password
or some encrypted response using his or her user name and password information. The gateway
then attempts to verify this information first against a local user database (if RADIUS-PAP is
enabled) and then by relaying the information to a central authentication server such as a RADIUS
server.
To configure primary and backup RADIUS servers:
1. Select VPN > IPSec VPN from the menu. The IPsec VPN submenu tabs display, with the IKE
Policies screen in view (see
Virtual Private Networking Using IPsec Connections
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Settings (continued)
Description (or Subfield and Description)
The user name for XAUTH.
The password for XAUTH.
Figure 5-20 on page
v1.0, April 2010
"Configuring User Accounts" on page
5-22).
7-9.
5-39