Juniper NETWORK AND SECURITY MANAGER 2010.2 - ADMINISTRATION GUIDE REV1 Administration Manual page 454

Network and Security Manager Administration Guide
404
On the RADIUS server, load the Juniper Networks dictionary file and define auth user
1.
accounts. Use the Juniper Networks user group VSA to create the user group auth_grp2
and apply it to the auth user accounts that you want to add to that group.
NOTE: For instructions on loading the dictionary file onto a RADIUS server, refer to the
RADIUS server documentation. If you are using a Microsoft IAS RADIUS server, there is
no dictionary file to load; you must manually define the correct vendor-specific attributes
(VSAs) on the server.
In NSM, in the main navigation tree, select Object Manager > Authentication Servers
2.
and click the Add icon. Configure the server:
a. For name, enter radius1. Select a color and add a comment, if desired.
b. For Main Server, enter the IP 10.20.1.100; for Primary Backup Server, enter IP
10.20.1.110; for Secondary Backup Server, enter IP 10.20.1.120.
c. For timeout, enter 30.
d. Select For Firewall Auth Users.
e. For Server Type, select RADIUS, then configure the RADIUS server:
For server port, enter 4500 (default is 1645)
For secret, enter A56hYY97kl
For retry timeout, select 4.
f. Click OK to save the RADIUS authentication server object.
Configure the External User Group in NSM:
3.
a. In the Object Manager, select User Objects > External User Groups.
b. Click the Add icon to display the New External User Group dialog box. Configure
the following, then click OK:
For Name, enter auth_grp2.
For Color, select red.
For Comment, enter Accountant Access.
Enable Auth.
Add the address object that represents the Accounting Server:
4.
a. In the Object Manager, select Address Objects. Click the Add icon and select
Host. The New Host dialog box appears.
b. Configure the following, then click OK:
Copyright © 2010, Juniper Networks, Inc.