Fujitsu Eternus web GUI - Page 632

Appendix E Using RADIUS Authentication
E.3 Setting Up the RADIUS Server
ETERNUS Web GUI User’s Guide
632
Copyright 2011 FUJITSU LIMITED P2X0-1090-02ENZ0
(3) Configure the users
Network Policy Server (NPS) is the Microsoft implementation of a RADIUS server and proxy.
When using NPS to check the User login certificate, a list of user groups is displayed instead
of a list of specific users. Each user group must be associated with a role that logs into a spe-
cific ETERNUS DX Disk storage system. For example, after setting the "root", "Admin", and
"user" user groups, those users that are to be allowed to login must be added to the proper
group.
● Create Users and User Groups
(1) Select [Start] → [Administrative Tools] → [Computer Management].
(2) Select [System Tools] → [Local Users and Groups] → [Users].
Right-click [Users] and select [New User].
Create an ETERNUS DX Disk storage system login user as the [New User].
(3) Select [System Tools] → [Local Users and Groups] → [Groups].
Right-click [Groups] and select [New Group].
Create an ETERNUS DX Disk storage system group as the [New Group] and add
the user created in Step (2)
.
(4) Set the Network Policy and Access Services
The following three steps must be performed:
- Register the ETERNUS DX Disk storage system as a RADIUS client
- Set the accessible user group and the authentication method
- Set the role with Vendor Specific Attribute (VSA)
● Register the ETERNUS DX Disk storage system as a RADIUS client
(1) Select [Start] → [Administrative Tools] → [Server Manager].
(2) Select [Roles] → [Network Policy and Access Services] → [NPS] → [RADIUS Cli-
ents and Servers] → [RADIUS Clients].
Right-click [RADIUS Clients] and select [New RADIUS Client], and set the various
items.
• For the "Address (IP or DNS)", set the IP address of the client ETERNUS DX
Disk storage system.
• For the "Vendor name", set "RADIUS Standard".
• For the "Shared secret", set the shared key that is registered on the client
ETERNUS DX Disk storage system.