Radius-Based Management User Authentication - AudioCodes Mediant 4000 SBC User Manual


To configure the RADIUS Vendor ID:
1. Open the Authentication Server page (Setup menu > Administration tab > Web &
CLI folder > Authentication Server).
2. Under the RADIUS group, in the 'RADIUS VSA Vendor ID' field, enter the same
vendor ID number as set on the third-party RADIUS server.
3. Click Apply.

15.3.6 RADIUS-based Management User Authentication

You can enhance security for your device by implementing Remote Authentication Dial-In
User Service (RADIUS - RFC 2865) for authenticating multiple management user accounts
of the device's embedded Web and Telnet (CLI) servers. Thus, RADIUS also prevents
unauthorized access to your device.
When RADIUS authentication is not used, the user's login username and password are
locally authenticated by the device using the Local Users table (see ''Configuring
Management User Accounts'' on page 58). However, you can configure the device to use
the Local Users table as a fallback mechanism if the RADIUS server does not respond.
When RADIUS authentication is used, the RADIUS server stores the user accounts -
usernames, passwords, and access levels (authorization). When a management user
(client) tries to access the device, the device sends the RADIUS server the user's
username and password for authentication. The RADIUS server replies with an acceptance
or a rejection notification. During the RADIUS authentication process, the device's Web
interface is blocked until an acceptance response is received from the RADIUS server.
Communication between the device and the RADIUS server is done using a shared secret,
which is not transmitted over the network.
Figure 15-14: RADIUS Login Authentication for Management
For using RADIUS, you need to do the following:

Set up a RADIUS server (third-party) to communicate with the device - see ''Setting
Up a Third-Party RADIUS Server'' on page 221

Configure the device as a RADIUS client for communication with the RADIUS server -
see ''Configuring RADIUS Authentication'' on page 222
User's Manual
Figure 15-13: Configuring RADIUS Vendor ID
220
Mediant 4000 SBC
Document #: LTRT-41729