Table of Contents
Advertisement
Linksys
Linksys
The user-configurable, TCP port used for RADIUS server accounting is the same
TCP port that is used for RADIUS server authentication and authorization
Defaults
The following defaults are relevant to this feature:
•
No default RADIUS server is defined by default
•
If you configure a RADIUS server, the accounting feature is disabled
•
by default
Radius Workflow
To use a RADIUS server, do the following:
STEP 1 Open an account for the device on the RADIUS server
STEP 2 Configure that server along with the other parameters in the RADIUS
and ADD RADIUS Server pages
NOTE:
If more than one RADIUS server has been configured, the device uses the
configured priorities of the available RADIUS servers to select the RADIUS
server to be used by the device
To set the RADIUS server parameters:
STEP 1 Click Security > RADIUS
STEP 2 Enter the default RADIUS parameters if required If a value is not
entered for a specific server (in the Add RADIUS Server page) the
device uses the values in these fields
Retries—Enter the number of transmitted requests that are sent to the
•
RADIUS server before a failure is considered to have occurred
Timeout for Reply—Enter the number of seconds that the device waits for
•
an answer from the RADIUS server before retrying the query, or switching
to the next server
Dead Time—Enter the number of minutes that elapse before a non-
•
responsive RADIUS server is bypassed for service requests If the value is
0, the server is not bypassed
•
Key String—Enter the default key string used for authenticating and
encrypting between the device and the RADIUS server This key must
match the key configured on the RADIUS serve A key string is used to
encrypt communications by using MD5
This overrides the default key string if one has been defined
STEP 3 Click Apply The RADIUS default settings for the device are updated in
the Running Configuration file
To add a RADIUS server, click Add
STEP 4 Enter the values in the fields for each RADIUS server To use the
default values entered in the RADIUS page, select Use Default
Add Server—Select whether to specify the RADIUS server by IP Address
•
or name
IP Version—Select the version of the IP address of the RADIUS server
•
IPv6 Address Type—Select the IPv6 address type (if IPv6 is used) The
•
options are:
IP Version—Select the version of the IP address of the RADIUS server
•
IPv6 Address Type—Select the IPv6 address type (if IPv6 is used) The
•
options are:
Link Local—The IPv6 address uniquely identifies hosts on a single
•
network link A link local address has a prefix of FE80, is not routable,
and can be used for communication only on the local network Only
one link local address is supported If a link local address exists on the
interface, this entry replaces the address in the configuration
Global—The IPv6 address is a global Unicast IPV6 type that is visible
•
and reachable from other networks
Interface—Select the link local interface (if IPv6 Address Type Link
•
Local is selected) from the list
•
Server IP Address—Enter the IP address of the RADIUS server
•
Server Name—Enter the name of the RADIUS server
Authentication Port—Enter the UDP port number of the RADIUS server
•
port for authentication requests
Accounting Port—Enter the UDP port number of the RADIUS server port
•
for accounting requests
Priority—Enter the priority of the server The priority determines the
•
order the device attempts to contact the servers to authenticate a user
The device starts with the highest priority RADIUS server first Zero is the
highest priority
Table of Contents
Table of Contents
76
76
Advertisement
Table of Contents
