RADIUS Set Up Server window

Authentication Protocol

Specify a RADIUS protocol to use.

• PAP: Password authentication protocol that transmits plaintext user ID and password.
• CHAP: Challenge-handshake authentication protocol that transmits encrypted password.

Host Name

Specify a name of the RADIUS server.

You can specify ASCII code characters, hyphens (-), and periods (.).

Secret

Specify a RADIUS secret key used for the PAP authentication or the CHAP authentication.

You can specify ASCII code characters and the following symbols:

! # $ % & ' ( ) * + - . = @ \ ^ _ |

Re-enter Secret

Re-enter the RADIUS secret key to confirm your entry.

You can specify ASCII code characters and the following symbols:

! # $ % & ' ( ) * + - . = @ \ ^ _ |

NAS Address

Specify an identifier for the RADIUS server to find SVP.

• To specify a host name, select Identifier and enter the host name.

  You can specify ASCII code characters and the following symbols:

  ! " # $ % & ' ( ) * + , - . / ; : < > = ? @ [ \ ] ^ _ ( } ~

• To specify an IPv4 address, select IPv4 and enter 4 numbers (0-255).

  For example:

  XXX.XXX.XXX.XXX (X indicates a digit)

  Specify only numbers. Do not specify any periods.

• To specify an IPv6 address, select IPv6 and enter 8 hexadecimal numbers (0-FFFF).

  For example:

  YYYY:YYYY:YYYY:YYYY:YYYY:YYYY:YYYY:YYYY (Y indicates a hexadecimal digit)

  Enter 0 to omit a segment.

Port Number

Specify a port number of the RADIUS server.

Timeout

Specify the number of seconds before connection to the RADIUS server times out.

Number of Retries

Specify the retry times when the connection to the RADIUS server fails.

Secondary Server

Specify whether to use a secondary RADIUS server and a secondary LDAP server.

• Enable: Uses secondary servers.
• Disable: Does not use secondary servers.

Secondary Server - Host Name

Specify a host name of the secondary RADIUS server.

You can specify ASCII code characters, hyphens (-), and periods (.).

If you select Disable in Secondary Server, this item is disabled.

Secondary Server - Port Number

Specify a port number of the secondary RADIUS server.

If you select Disable in Secondary Server, this item is disabled.

External User Group Mapping

Specify whether to connect an authentication server to an authorization server.

• Enable: Connects an authentication server to an authorization server.
• Disable: Does not connect an authentication server to an authorization server.

External User Group Mapping - Certificate File Name

Specify a certificate file. Click Browse to find the file.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - DNS Lookup

Specify whether to search for the LDAP server using the information registered in the SRV records in the DNS server.

• Enable: Do not select the search using information registered in the SRV records in the DNS server.
• Disable: Select the search using the host name and the port number.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Authentication Protocol

Specify an LDAP protocol to use. Available protocols are as follows.

• Select LDAP over SSL/TLS
• Do not select STARTTLS

If you select Enable in DNS Lookup, you cannot select LDAP over SSL/TLS.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Host Name

Specify a host name of the LDAP server.

You can specify ASCII code characters, hyphens (-), and periods (.).

If you select Enable in DNS Lookup, or if you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Port Number

Specify a port number of the LDAP server.

If you select Enable in DNS Lookup, or if you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Domain Name

Specify a domain name of the LDAP server.

You can specify ASCII code characters, hyphens (-), and periods (.).

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Base DN

Specify a base DN to search for users to authenticate.

Available characters: Alphanumeric characters (ASCII characters) and all symbols.

• Hierarchical model: Specify a DN of hierarchy that includes all the targeted users for searching.
• Flat model: Specify a DN of hierarchy that is one level up of the targeted user for searching.

If this field is blank, the value specified for the defaultNamingContext attribute of Active Directory is assumed as the base DN.

If you select Disable in External User Group Mapping, this item is disabled.

To use symbols such as + ; , < = and > in the basedn field, type a backslash (\) before each symbol. When using multiple symbols, each symbol must have a backslash (\) before it. For example, to enter abc++, type abc\+\+.

External User Group Mapping - Search User's DN

Search for a user by specifying a DN

Available characters: Alphanumeric characters (ASCII characters) and all symbols.

If you select Disable in External User Group Mapping, this item is disabled.

To use symbols such as + ; , < = and > in the searchdn field, type a backslash (\) before each symbol. When using multiple symbols, each symbol must have a backslash (\) before it. For example, to enter abc++, type abc\+\+.

External User Group Mapping - Password

Search for a user by specifying his password. Specify the same password that is registered in the LDAP server.

You can specify ASCII code characters and the following symbols:

! # $ % & ' ( ) * + - . = @ \ ^ _ |

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Re-enter Password

Re-enter the password of the user you are searching for to confirm your entry.

You can specify ASCII code characters and the following symbols:

! # $ % & ' ( ) * + - . = @ \ ^ _ |

If you enter any password in External User Group Mapping - Password, you must specify this item.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Timeout

Specify the number of seconds before connection to the LDAP server times out.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Retry Interval

Specify a retry interval in seconds when the connection to the LDAP server fails.

If you select Disable in External User Group Mapping, this item is disabled.

External User Group Mapping - Number of Retries

Specify retry times when the connection to the LDAP server fails.

If you select Disable in External User Group Mapping, this item is disabled.

Test User Name

Specify a user name for a server connection test.

You can specify ASCII code characters and the following symbols:

! # $ % & ' * + - . / = ? @ ^ _ ` { | } ~

Password

Specify a password of the user name for a server connection test.

You can specify ASCII code characters and the following symbols:

! # $ % & ' ( ) * + , -. / : ; < = > ? @[ \ ] ^ _` { | } ~

Server Configuration Test

Click Check to conduct a server connection test for the authentication server and the authorization server based on the specified settings.

Server Configuration Test - Result

Displays a result of the server connection test for the authentication server and the authorization server.