Digi TransPort LR54 - Configure an Openvpn Server to Use RADIUS Authentication

Virtual Private Networks (VPN) OpenVPN
Digi TransPort WR Routers User Guide
208
Configure an OpenVPN server to use RADIUS authentication
The OpenVPN server can authenticate clients using RADIUS instead of configuring usernames and
passwords on the device.
To use RADIUS, set the OpenVPN authentication mode to username and password, and configure and
enable the RADIUS server and secret.
Web
1. On the menu, click Network > Networks > OpenVPN and select OpenVPN Server. The
OpenVPN Server page appears.
2. Click Edit. The OpenVPN server page displays the settings for the OpenVPN server.
3. Enter the Authentication settings:
n Auth-By: Select Username and password.
n Radius Server State: Enable the RADIUS server.
n Radius Server: Configure the IP address or domain name of the RADIUS server.
n Radius Server Secret: Configure the secret of the RADIUS server.
4. Click Apply.
Command line
1. Configure the authentication mode to use username and password authentication.
digi.router> openvpn-server auth-by user-pass
2. Configure OpenVPN to use RADIUS to authenticate users.
digi.router> openvpn-server radius-server-state on
3. Configure the RADIUS server address.
digi.router> openvpn-server radius-server 10.12.33.200
4. Configure the RADIUS server secret.
digi.router> openvpn-server radius-server-secret mysecret
5. (Optional) Configure the RADIUS server port. For example, to change the port to 8812, the
command is:
digi.router> openvpn-server radius-server-port 8812
6. Save the configuration.
digi.router> save config