More Information - Colubris Networks CN3000 Administrator's Manual

Chapter 2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - How it works - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 2
For backup redundancy, each CN3000 RADIUS profile supports a primary and
secondary server.
The CN3000 will function with any RADIUS server that supports RFC 2865 and RFC
2866. Authentication occurs via EAP-MD5, CHAP, MSCHAP v1/v2, or PAP.
Important: To safeguard the integrity of the RADIUS traffic, it is important that you
protect communications between the CN3000 and the RADIUS server. The CN3000
lets you use PPTP or IPSec to create a secure tunnel to the RADIUS server. Refer to
"Secure remote connectivity" on page 49
accomplish this.
Note: If you change a RADIUS profile to connect to a different server while customers
are logged in, all RADIUS traffic for active customer sessions is immediately sent to the
new server.
Note: The CN3000 sends all RADIUS traffic via the Internet port. Therefore,
connections with RADIUS servers cannot be made via the LAN port.
More For information on configuring the RADIUS server, see:
•
information
•
•
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 41 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Chapter 7, which explains all the settings you can define on the RADIUS server for
your customer accounts and network operation.
Chapter 15, which provides a walkthrough of a sample RADIUS configuration using
Steel-belted Radius.
Chapter 16, which provides a walkthrough of a sample RADIUS configuration using
Microsoft's RADIUS server: Internet Authentication Service.
for complete instructions on how to