NOTE
The realm NULL section must go after the realm LOCAL section, or you can comment out the realm LOCAL section.
2 Configure your RADIUS server to allow the Sentriant AG IP address as a client with the shared
secret specified in the previous step. See your RADIUS server's documentation for instructions on
how to configure allowed clients.
3 Configure the
SAFreeRADIUSConnector.conf
VLANS. See comments in the following sample file for instructions.
#
# Free Radius Connector configuration file
#
#
# TO DO - Change localhost to your server's IP if this is not the built-in
FreeRadius server
#
ServerUrl=https://localhost/servlet/AccessControlServlet
DebugLevel=4
Debug=on
Username=nacuser
Password=nacpwd
#
# TO DO - Modify the vlan ids and names to match your switch configuration
#
#
# Use these attributes for all non-Extreme switches
#
#
# Uncomment these two sections if you want the connector to specify the normal user
vlan
# rather than specifying it for each user in the users configuration file.
#
#"HealthyRadiusAttributes"
#
Tunnel-Medium-Type := 6,
#
Tunnel-Private-Group-ID := 50,
#
Tunnel-Type := VLAN,
#
#"CheckupRadiusAttributes"
#
Tunnel-Medium-Type := 6,
#
Tunnel-Private-Group-ID := 50,
#
Tunnel-Type := VLAN,
Sentriant AG Users' Guide, Version 5.0
file with the appropriate RADIUS attributes and
802.1X Quarantine Method
259