How Radius Authentication Works; Configuring Radius Authentication In Alteon - Radware Alteon Application Manual

How RADIUS Authentication Works

Figure 1 - RADIUS Authentication Process, page 63
In the figure, Alteon acts as the RADIUS client, and communicates to the RADIUS server to
authenticate and authorize a remote administrator using the protocol definitions specified in RFC
2138 and RFC 2866. Transactions between the client and the RADIUS server are authenticated using
a shared key that is not sent over the network. In addition, the remote administrator passwords are
sent encrypted between the RADIUS client (Alteon) and the back-end RADIUS server.
Figure 1: RADIUS Authentication Process

Configuring RADIUS Authentication in Alteon

The following is an example RADIUS authentication configuration.
1. Turn RADIUS authentication on, then configure the primary and secondary RADIUS servers. You
can configure IPv4 or IPv6 addresses for the RADIUS servers.
>> Main# /cfg/sys/radius
>> RADIUS Server# on
Current status: OFF
New status: ON
>> RADIUS Server# prisrv 10.10.1.1
Current primary RADIUS server:
New pending primary RADIUS server: 10.10.1.1
>> RADIUS Server# secsrv 10.10.1.2
Current secondary RADIUS server:
New pending secondary RADIUS server:
10.10.1.2
2. Configure the RADIUS secret.
>> RADIUS Server# secret
Enter new RADIUS secret: <1-32 character secret>
Caution: If you configure the RADIUS secret using any method other than a direct console
connection, the secret may be transmitted over the network as clear text.3.Optionally, you can
change the default TCP port number used to listen to RADIUS.
The well-known port for RADIUS is 1812.
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
illustrates the RADIUS Authentication process.
(Select the RADIUS Server menu)
(Turn RADIUS on)
(Enter the primary server IP)
0.0.0.0
(Enter the secondary server IP)
0.0.0.0
Securing Alteon
63