ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Virtual Private Networking Using IPsec Connections 5-41
v1.0, April 2010
4. Click Apply to save your settings.
Primary Server NAS
Identifier
The primary Network Access Server (NAS) identifier that must be present
in a RADIUS request.
Note: The VPN firewall functions as as NAS, allowing network access to
external users after verification of their authentication information. In a
RADIUS transaction, the NAS must provide some NAS identifier
information to the RADIUS server. Depending on the configuration of the
RADIUS server, the VPN firewall’s IP address might be sufficient as an
identifier, or the server might require a name, which you must enter in this
field.
Backup RADIUS Server
Select the Yes radio button to enable and configure the backup RADIUS server, and then enter the
settings for the three fields to the right. The default setting is that the No radio button is selected.
Backup Server IP Address The IP address of the backup RADIUS server.
Secret Phrase A shared secret phrase to authenticate the transactions between the
client and the backup RADIUS server. The same secret phrase must be
configured on both the client and the server.
Backup Server NAS
Identifier
The backup NAS identifier that must be present in a RADIUS request.
Note: See the Note earlier in this table for the Primary Server NAS
Identifier.
Connection Configuration
Time out period The period in seconds that the VPN firewall waits for a response from a
RADIUS server.
Maximum Retry Counts The maximum number of times that the VPN firewall attempts to connect
to a RADIUS server.
Note: You select the RADIUS authentication protocol (PAP or CHAP) on the Edit
IKE Policy screen or Add IKE Policy screen (see “Configuring XAUTH for
VPN Clients” on page 5-38).
Table 5-14. RADIUS Client Settings (continued)
Item Description (or Subfield and Description)
To Next Page
Loading...
