Setting Up A Third-Party Radius Server - AudioCodes Mediant 1000 User Manual

Management User Accounts'' on page 65). However, you can configure the device to use
the Local Users table as a fallback mechanism if the RADIUS server does not respond.
When RADIUS authentication is used, the RADIUS server stores the user accounts -
usernames, passwords, and access levels (authorization). When a management user
(client) tries to access the device, the device sends the RADIUS server the user's
username and password for authentication. The RADIUS server replies with an acceptance
or a rejection notification. During the RADIUS authentication process, the device's Web
interface is blocked until an acceptance response is received from the RADIUS server.
Communication between the device and the RADIUS server is done using a shared secret,
which is not transmitted over the network.
Figure 15-10: RADIUS Login Authentication for Management
For using RADIUS, you need to do the following:

Set up a RADIUS server (third-party) to communicate with the device - see ''Setting
Up a Third-Party RADIUS Server'' on page 226

Configure the device as a RADIUS client for communication with the RADIUS server -
see ''Configuring RADIUS Authentication'' on page 227

15.2.6.1 Setting Up a Third-Party RADIUS Server

The following procedure provides an example for setting up a third-party RADIUS sever,
FreeRADIUS which can be downloaded from www.freeradius.org. Follow the instructions
on this Web site for installing and configuring the server. If you use a RADIUS server from
a different vendor, refer to its appropriate documentation.

To set up a third-party RADIUS server (e.g., FreeRADIUS):
1. Define the device as an authorized client of the RADIUS server, with the following:
•
Predefined shared secret (password used to secure communication between the
device and the RADIUS server)
•
Vendor ID (configured on the device in ''Configuring the RADIUS Vendor ID'' on
page 225)
Below is an example of the clients.conf file (FreeRADIUS client configuration):
#
User's Manual
Mediant 1000B Gateway & E-SBC
226 Document #: LTRT-27045