Quantum SPARK 1500 - Page 330

Configuring Remote Access Authentication Servers
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Locally Managed Administration Guide|330
To configure remote access permissions for users defined in the RADIUS server:
1. Click permissions for RADIUSusers.
2. Select or clear the Enable RADIUS authentication for remote access users checkbox.
3. When selected, choose which users are given remote access permissions:
n
To allow all users defined in the RADIUS server to authenticate - Select All users
defined on RADIUS server
n
Specific user groups defined in the RADIUS server - Select For specific RADIUS
groups only and enter in the text field the names of the user groups separated by
commas.
n
To allow administrators with Read-only permissions to authenticate - Select Read-
only Administrators
4. Click Apply
To add an Active Directory domain:
1. In the Active Directory section, click New.
2. Enter this information:
n
Domain - The domain name.
n
IP address - The IP address of one of the domain controllers of your domain.
n
User name - The user must have administrator privileges to ease the configuration
process and create a user based policy using the users defined in the Active
Directory.
n
Password - The user's password.
Note - You cannot use these characters in a password or shared secret: {
} [ ] ` ~ | ‘ " \ (maximum number of characters: 255)
n
User DN - Click Discover for automatic discovery of the DN of the object that
represents that user or enter the user DN manually.
For example: CN=John
James,OU=RnD,OU=Germany,O=Europe,DC=Acme,DC=com
3. Select Use user groups from specific branch only if you want to use only part of the
user database defined in the Active Directory. Enter the branch in the Branch full DN in
the text field.
4. Click Apply