NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 183

Table 5-14.
RADIUS Client
Item
Primary Server NAS
Identifier
Backup RADIUS Server
Select the Yes radio button to enable and configure the backup RADIUS server, and then enter the
settings for the three fields to the right. The default setting is that the No radio button is selected.
Backup Server IP Address
Secret Phrase
Backup Server NAS
Identifier
Connection Configuration
Time out period
Maximum Retry Counts
4. Click Apply to save your settings.
Note: You select the RADIUS authentication protocol (PAP or CHAP) on the Edit
IKE Policy screen or Add IKE Policy screen (see
VPN Clients" on page
Virtual Private Networking Using IPsec Connections
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Settings (continued)
Description (or Subfield and Description)
The primary Network Access Server (NAS) identifier that must be present
in a RADIUS request.
Note: The VPN firewall functions as as NAS, allowing network access to
external users after verification of their authentication information. In a
RADIUS transaction, the NAS must provide some NAS identifier
information to the RADIUS server. Depending on the configuration of the
RADIUS server, the VPN firewall's IP address might be sufficient as an
identifier, or the server might require a name, which you must enter in this
field.
The IP address of the backup RADIUS server.
A shared secret phrase to authenticate the transactions between the
client and the backup RADIUS server. The same secret phrase must be
configured on both the client and the server.
The backup NAS identifier that must be present in a RADIUS request.
Note: See the Note earlier in this table for the Primary Server NAS
Identifier.
The period in seconds that the VPN firewall waits for a response from a
RADIUS server.
The maximum number of times that the VPN firewall attempts to connect
to a RADIUS server.
5-38).
v1.0, April 2010
"Configuring XAUTH for
5-41