Configuring RADIUS Authentication

Access Manager Plus lets you integrate with the Remote Authentication Dial-In User Service (RADIUS) in your environment and leverage RADIUS authentication for user access. RADIUS is a client/server protocol that allows remote access servers to connect with a database to authenticate users and authorize their access to a system. Once you set up RADIUS-based authentication, it will bypass the local authentication provided by Access Manager Plus. This section explains the two steps involved in integrating RADIUS server with Access Manager Plus:

1. Configuring RADIUS Server
2. Enabling RADIUS Authentication

1. Configuring RADIUS Server

1. Navigate to Admin >> Authentication >> RADIUS.
2. Click Configure under 1. Configure RADIUS Server.

   

3. In the pop-up that opens, enter the following attributes:
   1. Server Name/IP Address - enter the host name or IP address of the host where RADIUS server is running
   2. Server Authentication Port - enter the port used for RADIUS server authentication. By default, RADIUS has been assigned the UDP port 1812 for Authentication
   3. Server Protocol - select the protocol that is used to authenticate users. Choose from four protocols - Password Authentication Protocol (PAP), Challenge-Handshake Authentication Protocol (CHAP), Microsoft Challenge-Handshake Authentication Protocol (MSCHAP), Version 2 of Microsoft Challenge-Handshake Authentication Protocol (MSCHAP2)
   4. Authentication Retries - Choose the number of times you wish to retry authentication in the event of an authentication failure
   5. Server Secret - You have the option to enter the RADIUS server secret either manually in the textbox or you can direct Access Manager Plus to use the secret already stored in the product by choosing the option Use an Account Stored in Access Manager Plus. In that case, you need to select the connection name and account name from the drop-down.
   6. Click Save.

2. Enabling RADIUS Authentication

After configuring the RADIUS server, the next step is to enable the RADIUS server's authentication mechanism. To enable RADIUS authentication, click Enable RADIUS Authentication in step 2. Once you do this, users would be able to login to Access Manager Plus with their RADIUS credentials.