Step 1: Setting Up The Cn3000 Radius Client; Configuration Procedure - Colubris Networks CN3000 Administrator's Manual

Chapter 5 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Activating the public access interface - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 5

Step 1: Setting up the CN3000 RADIUS client

The CN3000 lets you define up to 16 RADIUS client profiles. Each profile defines the
settings for a RADIUS client connection. To support a client connection, you must create
a client account (sometimes called a RAS account) on the RADIUS server. The settings
for this account must match the profile settings you define on the CN3000.
For backup redundancy, each profile supports a primary and secondary server.
The CN3000 will function with any RADIUS server that supports RFC 2865 and RFC
2866. Authentication occurs via EAP-MD5, CHAP, MSCHAP v1/v2, or PAP.
Important: To safeguard the integrity of the customer accounts, it is important that you
protect communications between the CN3000 and the RADIUS server. The CN3000
lets you use PPTP or IPSec to create a secure tunnel to the RADIUS server. Refer to
"Secure remote connectivity" on page 49
accomplish this.
Note: If you change a RADIUS profile to connect to a different server while customers
are logged in, all RADIUS traffic for active customer sessions is immediately sent to the
new server.
Configuration 1. Click Security, then click RADIUS. The RADIUS profiles list page opens.
procedure
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 97 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
for complete instructions on how to