Contents

  About This Guide

Audience

PortMaster Documentation

ActivCard Documentation

Security Dynamics Documentation

Additional References

RFCs

Books

Document Conventions

Document Advisories

Contacting Lucent Remote Access Technical Support

For the EMEA Region

For North America, Latin America, and the Asia Pacific Region

PortMaster Training Courses

Subscribing to PortMaster Mailing Lists

1. Introducing

Introduction to RADIUS

Overview of RADIUS Features

How RADIUS Works

Basic RADIUS Functions

Ease-of-Use Enhancements

Feature No Longer Supported

RADIUS Directory Structure

RADIUS Installation and Configuration

2. Configuring a RADIUS

Getting Started

Selecting a RADIUS Server Host

Determining a Shared Secret

Installing RADIUS on a UNIX Host

Installation with pminstall

Installation without pminstall

3. Adding a RADIUS

Modifying the clients File

Configuring the PortMaster Using the Command Line Interface

Configuring the PortMaster Using PMVision

4. Configuring User

User Profile Format

Matching User Profiles

Editing User Profiles

Default User Profiles

Check Items

Passwords

Password Encryption

Username Prefixes and Suffixes

Called-Station-Id

Calling-Station-Id

Client Information

Connect-Rate

Framed-Protocol

Group

Service-Type

Reply Items

Specifying the Type of Service

Enabling and Disabling Compression

Specifying an IP Address for the User

Applying a Subnet Mask to the Address

Adding a Route to the PortMaster Routing Table

Configuring RIP on the User's Interface

Configuring an IPX Network Connection

Applying Packet Filters

Configuring a Login User

Granting a User Outbound Telnet Access

Setting Timeouts

Using Menus

Controlling the Number of Available Ports

Using RADIUS with PAP and CHAP

PAP

CHAP

Configuring Database Caching of User Profiles

Example PPP User Profile

5. Configuring RADIUS

Menu File Format

Single-Level Menu

Nested Menus

Termination Menus

Menus Called by Reference

Menu Filenames

6. Installing and Configuring

Overview of ActivCard Components

How ActivCard Works with RADIUS

Installing the ActivEngine Components on a UNIX Host

Using the ActivEngine Test Utility

RADIUS Configuration for ActivCard

Example config.aeg File

Troubleshooting ActivCard

7. Installing and Configuring

Overview of SecurID Components

How SecurID Works with RADIUS

ACE/Server Installation on a UNIX Host

Getting Started

Installing ACE/Server and Client Software on a UNIX Host

Administering ACE/Server with sdadmin

Authenticating with sdshell

RADIUS Configuration for SecurID

PIN Assignment

Entering an Invalid Token Code

Troubleshooting SecurID

8. Implementing RADIUS

How RADIUS Accounting Works

Getting Started

Client Configuration

Accounting Server Configuration

Installation

Configuring Options

Accounting Attributes

Acct-Authentic

Acct-Delay-Time

Acct-Input-Octets and Acct-Output-Octets

Acct-Session-Id

Acct-Session-Time

Acct-Status-Type

Acct-Terminate-Cause

Timestamp

Called-Station-Id and Calling-Station-Id

LE-Advice of Charge and LE-Terminate-Detail

NAS-Port-Type

Request-Authenticator

Start and Stop Records

Example 1

Example 2

9. Configuring RADIUS Proxy

How Proxy Service Works

Servers Running Proxy Service

Proxy Confederations

Configuring Proxy Information on the Server

Components of the proxy File

Special Realms: DEFAULT and NOREALM

On the Forwarding Server

On the Remote Server

Example Proxy Server Relationships and Configuration Steps

A. Troubleshooting

Troubleshooting RADIUS Authentication

Checking the radiusd Daemon

Checking the PortMaster

Checking /etc/raddb/users

Host Unavailable

Invalid Login after 30-Second Wait

Turning on the Debug Function

Result of Debug Output

Performance Degradation

Troubleshooting RADIUS Accounting

B. RADIUS for UNIX Error

Accounting

Authentication

Clients

Dictionary

Menu

Miscellaneous

SecurID

Users

C. RADIUS

D. RADIUS

E. Contact Information for Third-Party

ActivCard

Website

Voice

Fax

Email

iPass

Website

Voice

Fax

Email

SecurID

Website

Voice

Fax

Email

  Index