Adding RADIUS Server(s)

From TBwiki
Jump to: navigation, search

Applies to version(s): v2.7

Multiple RADIUS servers can be configured to provide RADIUS redundancy.

1- Select RADIUS from the navigation panel.

Radius Config left panel.jpg

2- In the Editing RADIUS client configuration page, select Create new RADIUS server

RADIUS-client-create-server-2 7.PNG

3- Configure the RADIUS server with these parameters:

  • Name to recognize the server.
  • Server IP address is the IP address of the RADIUS server.
  • Server UDP port is the UDP port of the RADIUS server.
  • Public IP address The IP address that will be set in the NAS-IP-Address attribute, when present. This is used when the RADIUS client is behind a NAT. Leave this field empty in order to use the source IP address instead.
  • Timeout The time to wait (in milliseconds or seconds) for a response from the RADIUS server before retrying.
  • Retries is the number of times to send the same request again when the timeout is reached. See full details on functionality here: CDR redundancy
  • Server type is the type of RADIUS server this configuration corresponds to. The choices are Accounting for CDR functionality and Authorization for authentication and authorization.
  • Associated server is used to link Accounting and Authorization servers together. See full details on functionality here:ACCT/AUTH Association
  • Use polling (Status-Server) dictates if polling with the Status-Server message is supported by this server. When enabled, this option allows the RADIUS client to recognize quickly and efficiently if the RADIUS server is available or not.
  • Polling Delay The time to wait (in milliseconds or seconds) before polling the server.
  • Server secret is the passphrase to authenticate the TMG on the RADIUS server.

RADIUS-server-configuration-2 7.png

4- You can configure multiple RADIUS servers to have RADIUS redundancy. Each entry can have different settings.

RADIUS-client-configuration-2 7.PNG

Personal tools