User Database Configuration; Radius Client And Server Configuration - NETGEAR FVS318G Reference Manual

Table 54. Extended authentication settings for IPv4 and IPv6 (continued)
Setting Description
Username The user name for XAUTH.
Password The password for XAUTH.
6. Click the Apply button.
Your changes are saved.

User Database Configuration

When XAUTH is enabled in an Edge Device configuration, users must be authenticated
either by a local user database account or by an external RADIUS server. Whether or not you
use a RADIUS server, you might want some users to be authenticated locally. These users
must be added to the List of Users table on the Users screen, as described in
Accounts
on page 295.

RADIUS Client and Server Configuration

Remote Authentication Dial In User Service (RADIUS, RFC 2865) is a protocol for managing
authentication, authorization, and accounting (AAA) of multiple users in a network. A
RADIUS server stores a database of user information and can validate a user at the request
of a gateway or server in the network when a user requests access to network resources.
• During the establishment of a VPN connection, the VPN gateway can interrupt the
process with an XAUTH request. At that point, the remote user must provide
authentication information such as a user name and password or some encrypted
response using the user name and password information.
• The gateway then attempts to verify this information first against a local user database (if
RADIUS-PAP is enabled) and then by relaying the information to a central authentication
server such as a RADIUS server.
You can select the RADIUS authentication protocol (PAP or CHAP) on the Edit IKE Policy
screen or Add IKE Policy screen. For more information, see
Clients
on page 257.
Even though you can configure RADIUS servers with IPv4 addresses only, the servers can
be used for authentication, authorization, and accounting of both IPv4 and IPv6 users.
To configure primary and backup RADIUS servers:

1. Log in to the unit:
a. In the address field of any of the qualified web browsers, enter https://192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
b. In the Username field, enter admin and in the Password / Passcode field, enter
password.
Virtual Private Networking Using IPSec and L2TP Connections
NETGEAR ProSAFE VPN Firewall FVS318G v2
259
Configure User
Configure XAUTH for VPN