Digi TransPort LR54 - Configure a RADIUS Server

Security Remote Authentication Dial-In User Service (RADIUS)
Digi TransPort WR Routers User Guide
91
Primary server
available
Backup server
available
Local
authorization Who can log in?
No Yes
N/A
RADIUSand local users can log in.
No No Enabled
Only local users can log in.
RADIUSusers cannot log in until the
RADIUSservers are brought back up.
No No Disabled No users can log in.
Configure a RADIUS server
This section describes how to configure a RADIUS server for authentication and authorization.
Required configuration items
n Enable the RADIUS server. It is disabled by default.
n Define the primary server IP address or domain name.
n Define the primary server port. It is configured to 1812 by default.
n Define the primary server shared secret.
n Determine whether local authentication is used if a RADIUS server is unavailable. It is enabled
by default.
Additional configuration items
n The server NAS ID. If left blank, the default value of sshd is sent out.
n Time in seconds before the request to the server times out. The default is 3 seconds and the
maximum possible value is 10 seconds.
n Enable debug logging. It is disabled by default.
n Add a backup server in case the primary RADIUS server is unavailable. Configuration items
similar to the primary RADIUS server are also available for the backup RADIUS server.
Web
1. On the menu, click Security > RADIUS. The RADIUS page appears.
2. Under the Settings section, enable the RADIUS-based authentication feature and configure the
basic settings:
a. Click Enable to turn RADIUS based authentication on.
b. In the NASID field, enter a NAS ID for the TransPort. This attribute contains a string
identifying the NAS originating the request to the RADIUS server. If the field is left
blank, the default value of sshd is sent out.
c. Click Local Auth Fallback to enable authentication of local TransPort users when
the primary and backup RADIUS servers are unavailable.
d. Click Debug to log RADIUS debug messages to the TransPort log. This is optional.
3. Under the Primary Server Settings section, configure the primary RADIUS server. See RADIUS
page for detailed information.