ZyXEL Communications ISG50 Network Router User Manual


 
Chapter 48 AAA Server
ISG50 User’s Guide
638
The following table describes the labels in this screen.
Table 252 Configuration > Object > AAA Server > RADIUS > Add
LABEL DESCRIPTION
Name Enter a descriptive name (up to 63 alphanumerical characters) for identification
purposes.
Description Enter the description of each server, if any. You can use up to 60 printable ASCII
characters.
Server Address Enter the address of the RADIUS server.
Authentication
Port
Specify the port number on the RADIUS server to which the ISG50 sends
authentication requests. Enter a number between 1 and 65535.
Backup Server
Address
If the RADIUS server has a backup server, enter its address here.
Backup
Authentication
Port
Specify the port number on the RADIUS server to which the ISG50 sends
authentication requests. Enter a number between 1 and 65535.
Timeout Specify the timeout period (between 1 and 300 seconds) before the ISG50
disconnects from the RADIUS server. In this case, user authentication fails.
Search timeout occurs when either the user information is not in the RADIUS
server or the RADIUS server is down.
Key Enter a password (up to 15 alphanumeric characters) as the key to be shared
between the external authentication server and the ISG50.
The key is not sent over the network. This key must be the same on the external
authentication server and the ISG50.
Group
Membership
Attribute
A RADIUS server defines attributes for its accounts. Select the name and number
of the attribute that the ISG50 is to check to determine to which group a user
belongs. If it does not display, select user-defined and specify the attribute’s
number.
This attribute’s value is called a group identifier; it determines to which group a
user belongs. You can add ext-group-user user objects to identify groups based
on these group identifier values.
For example you could have an attribute named “memberOf” with values like
“sales”, “RD”, and “management”. Then you could also create a ext-group-user
user object for each group. One with “sales” as the group identifier, another for
“RD” and a third for “management”.
OK Click OK to save the changes.
Cancel Click Cancel to discard the changes.