LEGRAND PDU - RADIUS Configuration Illustration

This section provides illustrations for configuring RADIUS authentication. One illustration is based on the
Microsoft
®
Network Policy Server (NPS), and the other is based on a FreeRADIUS server.
The following steps are required for any RADIUS authentication:
1. Configure RADIUS authentication on the Legrand PDU. See Adding Radius Servers (on page 177).
2. Configure rol
es on the Legrand PDU. See Creating Roles (on page 135).
3. Configure Le
grand PDU user credentials and roles on your RADIUS server.
 To configure using standard attributes, see Standard Attributes (on page 442).
 To configure usin
g vendor-specific attributes, see Vendor-Specific Attributes (on page 455).
Note that we assume
that the NPS is running on a Windows 2008 system in the NPS illustrations.
In This Chapter
Standard Attributes............................................................................... 442
Vendor-Specific Attributes .................................................................... 455
AD-Related Configuration..................................................................... 466
Standard Attributes
The RADIUS standard attribute "Filter-ID" is used to convey the group membership, that is, roles.
 If a user has multiple roles, configure multiple standard attributes for this user.
 The syntax of a standard attribute is:
Raritan:G{role-name}
For configuration on NPS, see NPS Standard Attribute Illustration (on page 442).
For configura
tion on FreeRADIUS, see FreeRADIUS Standard Attribute Illustration (on page 455).
NPS Standard Attribute Illustration
To configure Windows 2008 NPS with the standard attribute, you must:
a. Add your Legrand PDU to NPS. See Step A: Add Your Legrand PDU as a RADIUS Client (on page
443).
b. On the NPS, configure Co
nnection Request Policies and the standard attribute. See Step B: Configure
Connection Policies and Standard Attributes (on page 446).
Some configur
ation associated with Microsoft Active Directory (AD) is also required for RADIUS
authentication. See AD-Related Configuration (on page 466).
RADIUS Configuration
Illustration