ZyXEL Communications ISG50 User Manual
Chapter 48 AAA Server
ISG50 User’s Guide
638
The following table describes the labels in this screen.
Table 252
Configuration > Object > AAA Server > RADIUS > Add
LABEL
DESCRIPTION
Name
Enter a descriptive name (up to 63 alphanumerical characters) for identification
purposes.
purposes.
Description
Enter the description of each server, if any. You can use up to 60 printable ASCII
characters.
characters.
Server Address
Enter the address of the RADIUS server.
Authentication
Port
Port
Specify the port number on the RADIUS server to which the ISG50 sends
authentication requests. Enter a number between 1 and 65535.
authentication requests. Enter a number between 1 and 65535.
Backup Server
Address
Address
If the RADIUS server has a backup server, enter its address here.
Backup
Authentication
Port
Authentication
Port
Specify the port number on the RADIUS server to which the ISG50 sends
authentication requests. Enter a number between 1 and 65535.
authentication requests. Enter a number between 1 and 65535.
Timeout
Specify the timeout period (between 1 and 300 seconds) before the ISG50
disconnects from the RADIUS server. In this case, user authentication fails.
disconnects from the RADIUS server. In this case, user authentication fails.
Search timeout occurs when either the user information is not in the RADIUS
server or the RADIUS server is down.
server or the RADIUS server is down.
Key
Enter a password (up to 15 alphanumeric characters) as the key to be shared
between the external authentication server and the ISG50.
between the external authentication server and the ISG50.
The key is not sent over the network. This key must be the same on the external
authentication server and the ISG50.
authentication server and the ISG50.
Group
Membership
Attribute
Membership
Attribute
A RADIUS server defines attributes for its accounts. Select the name and number
of the attribute that the ISG50 is to check to determine to which group a user
belongs. If it does not display, select user-defined and specify the attribute’s
number.
of the attribute that the ISG50 is to check to determine to which group a user
belongs. If it does not display, select user-defined and specify the attribute’s
number.
This attribute’s value is called a group identifier; it determines to which group a
user belongs. You can add ext-group-user user objects to identify groups based
on these group identifier values.
user belongs. You can add ext-group-user user objects to identify groups based
on these group identifier values.
For example you could have an attribute named “memberOf” with values like
“sales”, “RD”, and “management”. Then you could also create a ext-group-user
user object for each group. One with “sales” as the group identifier, another for
“RD” and a third for “management”.
“sales”, “RD”, and “management”. Then you could also create a ext-group-user
user object for each group. One with “sales” as the group identifier, another for
“RD” and a third for “management”.
OK
Click OK to save the changes.
Cancel Click
Cancel to discard the changes.