To Next Page

To Previous Page

User authentication Remote Authentication Dial-In User Service(RADIUS)

IX20 User Guide

902

RADIUS user configuration

When configured to use RADIUSsupport, the IX20 device usesa remote RADIUSserver for user

authentication (password verification) and authorization (assigning the accesslevel of the user).

Additional RADIUSservers can be configured as backup servers for user authentication.

This section outlineshow to configure a RADIUSserver to beused for user authentication on your IX20

device.

Example FreeRADIUSconfiguration

With FreeRADIUS, users are defined in the usersfile in your FreeRADIUS installation. To define users:

1. Open the FreeRadiususer file in a text editor. For example:

$ sudo gedit /etc/freeradius/3.0/users

2. Add users to the file using the following format:

user1 Cleartext-Password := "user1"

Unix-FTP-Group-Names := "admin"

user2 Cleartext-Password := "user2"

Unix-FTP-Group-Names := "serial"

The Unix-FTP-Group-Namesattribute is optional. If used, the value must correspond to

authentication groupsconfigured on your IX20. Alternatively, if the user isalso configured as a

local user on the IX20 device and the RADIUSserver authenticatesthe user but doesnot return

any groups, the local configuration determines the list of groups. See Authentication groupsfor

more information about authentication groups. The Unix-FTP-Group-Namesattribute can

contain one group or multiple groupsin acomma-separated list.

3. Save and close the file.

4. Verify that your changes did not introduce any syntax errors:

$ sudo freeradius -CX

This should return a message that completes similar to:

...

Configuration appears to be OK

5. Restart the FreeRADIUSserver:

$ sudo /etc/init.d/freeradius restart

RADIUS server failover and fallback to local configuration

In addition to the primary RADIUSserver, you can also configure your IX20 device to use backup

RADIUSservers. Backup RADIUSservers are used for authentication requests when the primary

RADIUSserver is unavailable.

Falling back to local authentication

With user authentication methods, you can configure your IX20 device to use multiple typesof

authentication. For example, you can configure both RADIUSauthentication and local authentication,

so that local authentication can be used as a fallback mechanism if the primary and backup RADIUS

Digi IX20 User Manual

Questions and Answers: