Virtual Private Networking Using IPSec and L2TP Connections
259
NETGEAR ProSAFE VPN Firewall FVS318G v2
6. Click the Apply button.
Your changes are saved.
User Database Configuration
When XAUTH is enabled in an Edge Device configuration, users must be authenticated
either by a local user database account or by an external RADIUS server. Whether or not you
use a RADIUS server, you might want some users to be authenticated locally. These users
must be added to the List of Users table on the Users screen, as described in Configure User
Accounts on pag
e 295.
RADIUS Client and Server Configuration
Remote Authentication Dial In User Service (RADIUS, RFC 2865) is a protocol for managing
authentication, authorization, and accounting (AAA) of multiple users in a network. A
RADIUS server stores a database of user information and can validate a user at the request
of a gateway or server in the network when a user requests access to network resources.
• During the est
ablishment of a VPN connection, the VPN gateway can interrupt the
process with an XAUTH request. At that point, the remote user must provide
authentication information such as a user name and password or some encrypted
response using the user name and password information.
• The gateway then attempts to verify this information first against a local user database (if
RADIUS-P
AP is enabled) and then by relaying the information to a central authentication
server such as a RADIUS server.
You can select the RADIUS authentication protocol (PAP or CHAP) on the Edit
IKE Policy
screen or Add IKE Policy screen. For more information, see Configure XAUTH for VPN
Clients on page 25
7.
Even though you can configure RADIUS servers with IPv4
addresses only, the servers can
be used for authentication, authorization, and accounting of both IPv4 and IPv6 users.
To configure primary and backup RADIUS servers:
1. Log in to the unit:
a. In the address field of any of the qualified web browsers, enter
https://192.168.1.1.
The NETGEAR Configuration Manager Login screen d
isplays.
b. In the Username
field, enter admin and in the Password / Passcode field, enter
password.
Username The user name for XAUTH.
Password The password for XAUTH.
Table 54. Extended authentication settings for IPv4 and IPv6 (continued)
Setting Description
To Next Page
Loading...
Need help?
General
Weight and Dimensions
