Filter
Top Products
Virtual Private Networking Using IPSec and L2TP Connections
243
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
3. Click Apply to save your settings.
Note: You can select the RADIUS authentication protocol (PAP or CHAP)
on the Edit IKE Policy screen or Add IKE Policy screen (see
Configure XAUTH for VPN Clients on page 240).
Primary Server NAS
Identifier
The primary Network Access Server (NAS) identifier that needs to be present
in a RADIUS request.
Note: The VPN firewall functions as an NAS, allowing network access to
e
xternal users after verification of their authentication information. In a
RADIUS transaction, the NAS needs to provide some NAS identifier
information to the RADIUS server. Depending on the configuration of the
RADIUS server, the VPN firewall’s IP address might be sufficient as an
identifier, or the server might require a name, which you need to enter in this
field.
Backup RADIUS Server
To enable and configure the backup RADIUS server, select the Ye
s radio button, and then enter the
settings for the three fields to the right. The default setting is that the No radio button is selected.
Backup Server IP Address The IPv4 address of the backup RADIUS server.
Secret Phrase A shared secret phrase to authenticate the tra
nsactions between the client
and the backup RADIUS server. The same secret phrase needs to be
configured on both the client and the server.
Backup Server NAS
I
dentifier
The backup Network Access Server (NAS) identifier that needs to be present
in a RADIUS request.
Note: See the note earlier in this table for
the Primary Server NAS Identifier.
Connection Configuration
Time out period The period in seconds that the VPN firewall waits for a response from a
R
ADIUS server. The default setting is 30 seconds.
Maximum Retry Counts The maximum number of times that the VPN firewall attempts to connect to a
RADIUS server. The default setting is 4 retry counts.
Table 57. RADIUS Client screen settings (continued)
Setting Description