Configuring Radius-Based User Authentication - AudioCodes Mediant 4000 SBC User Manual

CHAPTER 16 Services
2. If access levels are required, set up a Vendor-Specific Attributes (VSA) dictionary for the
RADIUS server and select an attribute ID that represents each user's access level. The
example below shows a dictionary file for FreeRADIUS that defines the attribute "ACL-Auth-
Level" with "ID=35". For the device's user access levels and their corresponding numeric
representation in RADIUS servers, see
#
# AudioCodes VSA dictionary
#
VENDOR AudioCodes 5003
ATTRIBUTE ACL-Auth-Level 35 integer AudioCodes
VALUE ACL-Auth-Level ACL-Auth-UserLevel 50
VALUE ACL-Auth-Level ACL-Auth-AdminLevel 100
VALUE ACL-Auth-Level ACL-Auth-SecurityAdminLevel 200
3. Define the list of users authorized to use the device, using one of the password authentication
methods supported by the server implementation. The example below shows a user
configuration file for FreeRADIUS using a plain-text password:
# users - local user configuration database
john Auth-Type := Local, User-Password == "qwerty"
Service-Type = Login-User,
ACL-Auth-Level = ACL-Auth-SecurityAdminLevel
sue Auth-Type := Local, User-Password == "123456"
Service-Type = Login-User,
ACL-Auth-Level = ACL-Auth-UserLevel
4. Record and retain the IP address, port number, shared secret code, vendor ID, and VSA
access level identifier (if access levels are implemented) used by the RADIUS server.

Configuring RADIUS-based User Authentication

The following procedure describes how to configure RADIUS-based login authentication. For a
detailed description of the RADIUS parameters, see
➢
To configure RADIUS-based login authentication:
1. Open the Authentication Server page (Setup menu > Administration tab > Web & CLI folder
> Authentication Server).
2. From the 'Use RADIUS for Web/Telnet Login' drop-down list, select Enable to enable
RADIUS authentication for Web and Telnet login:
3. When implementing Web user access levels, do one of the following:
● If the RADIUS server response includes the access level attribute: In the 'RADIUS
VSA Access Level Attribute' field, enter the code that indicates the access level attribute
in the VSA section of the received RADIUS packet. For defining the RADIUS server with
access levels, see
● If the RADIUS server response does not include the access level attribute: In the
'Default Access Level' field, enter the default access level that is applied to all users
authenticated by the RADIUS server.
Configuring Management User
Setting Up a Third-Party RADIUS
- 213 -
Mediant 4000 SBC | User's Manual
Accounts.
RADIUS Parameters.
Server.