Black Box LRS002A-R2 Network Router User Manual


 
ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL
105
Appendix D: Interoperability
Routers can interoperate with multiple routers from multiple vendors in a coordinated manner. Use the
instructions in this appendix to provide interoperability with:
• RADIUS servers
• SecurID servers
• Cisco routers
• IPX synchronous routers (Sync Router only)
• TCP/IP synchronous routers
• CSUs/DSUs (Sync Router only)
D.1 RADIUS Servers
RADIUS is a protocol that allows multiple devices (like the Router) to access a single server for
authentication, authorization, and configuration information. This allows all names and passwords to be
administered from a single point, greatly simplifying the task in environments where many devices are
on the network.
RADIUS server software that executes on a UNIX host is available without charge. Source code is
available from:
Livingston Enterprises at
ftp://ftp.livingston.com/pub/livingston/radius-1.16.tar.Z
or Merit
®
at:
ftp://merit.edu/pub/michnet/radius.1.17.tar.Z
The Router has been tested with both of these types of RADIUS servers. If you have not previously run
RADIUS, you should obtain a new copy of the software and compile it for your system, and follow its
provided instructions.
The RADIUS documentation from Merit and Livingston refers to a Network Access Server (NAS). NAS
is a generic term for a dial-in router.
Configuration
To use RADIUS to authenticate clients connecting to the Router, perform the following configuration
steps:
1. Configure the RADIUS server to accept queries from the Router. To do this, add the Router’s name
(or IP address) and password to the clients file on the RADIUS server.
For the Livingston RADIUS server, the default location of this file is /etc/raddb/clients. For the Merit
RADIUS server, the default location of this file is /usr/private/etc/raddb.
2. Set the authentication method on the Router to RADIUS, and provide the name of the RADIUS
server to the Router. To do this use config, or use the following commands.