D-Link NetDefendOS - Page 656

gw-world:/> add Address IP4Address client_net
Address=192.168.10.10-192.168.10.255
UserAuthGroups=ue_group
B. Create the IP4Address object that defines the IP address pool for the DHCP server. This must be
a different object although it uses the same IP range:
gw-world:/> add Address IP4Address client_ip_range
Address=192.168.10.10-192.168.10.255
C. Create the DHCPServer object that hands out these addresses:
gw-world:/> add DHCPServer rr_dhcp_server
Interface=vlan_data
IPAddressPool=client_ip_range
Netmask=255.255.255.0
LeasesRequireAuth=Yes
D. Create the IPRule object that grants access for client data flowing to the backbone network
which is connected to the interface If2:
gw-world:/> add IPRule Action=Allow
Service=all_services
SourceInterface=vlan_data
SourceNetwork=client_net
DestinationInterface=If2
DestinationNetwork=all-nets
Name=client_access_rule
E. Create the RadiusRelay object:
gw-world:/> add RadiusRelay r_relay1
SourceInterface=vlan_auth
ClientIPFilter=client_ip_range
RemoteServerIP=radius_ip
DHCPServer=rr_dhcp_server
OverrideUserDataInterface=vlan_data
Web Interface
A. Create the IP4Address object that defines the range of client IP addresses for the UEs and
assign it the authentication group called ue_group:
1. Go to: Objects > Address Book > Add > IP4 Address
2. Now enter:
• Name: client_net
• IP Address: 192.168.10.0/24
• User Authentication: ue_group
3. Click OK
B. Create the IP4Address object that defines the IP address pool for the DHCP server. This must be
a different object although it uses almost the same IP range:
Chapter 8: User Authentication
656