Configuring the Firewall to use a RADIUS Server 133
does not respond within the specified number of retries, the VPN
connection will be dropped. This field may range between 0 and 30. A
value of 3 is recommended for a typical network.
RADIUS Server Timeout in Seconds
The RADIUS Server Timeout in Seconds field determines the length of
time that will elapse before the Firewall attempts to contact the RADIUS
server again after a failure. The RADIUS server timeout may range from 0
to 60 seconds. A value of 5 seconds is recommended for a typical
network.
Changing RADIUS
Server Details
The primary RADIUS server is defined in the RADIUS server section. An
optional secondary RADIUS server may be defined if a backup RADIUS
server exists on the network.
The process for configuring a primary RADIUS server is described below. If
you have a backup or secondary RADIUS server on your network then
repeat the process for the Secondary Server fields.
Name or IP Address
Enter the DNS name or IP address of your RADIUS server in the Name or
IP Address field. Using the name of the server allows you to change its
address without reconfiguring the Firewall.
Click the Update button to save your changes.
Port Number
Enter the UDP port number that your RADIUS server listens on in the Port
Number field. This information can be found in the documentation that
came with your RADIUS server.
The Steel-Belted RADIUS Server, for example, is set to listen on port 1645
by default.
Click the Update button to save your changes.
Shared Secret
The shared secret of a RADIUS server is a case sensitive alphanumeric
string of up to 30 characters that is used to authenticate the Firewall and
the RADIUS server. Your RADIUS server may use its administrative
password as a shared secret.
DUA1611-0AAA02.book Page 133 Thursday, August 2, 2001 4:01 PM
Comentários a estes Manuais