Netgear FVS318Gv2 – ProSAFE VPN Firewall Series 参照マニュアル
Virtual Private Networking Using IPSec and L2TP Connections
259
NETGEAR ProSAFE VPN Firewall FVS318G v2
6.
Click the Apply button.
Your changes are saved.
User Database Configuration
When XAUTH is enabled in an Edge Device configuration, users must be authenticated
either by a local user database account or by an external RADIUS server. Whether or not you
use a RADIUS server, you might want some users to be authenticated locally. These users
must be added to the List of Users table on the Users screen, as described in
either by a local user database account or by an external RADIUS server. Whether or not you
use a RADIUS server, you might want some users to be authenticated locally. These users
must be added to the List of Users table on the Users screen, as described in
RADIUS Client and Server Configuration
Remote Authentication Dial In User Service (RADIUS, RFC 2865) is a protocol for managing
authentication, authorization, and accounting (AAA) of multiple users in a network. A
RADIUS server stores a database of user information and can validate a user at the request
of a gateway or server in the network when a user requests access to network resources.
authentication, authorization, and accounting (AAA) of multiple users in a network. A
RADIUS server stores a database of user information and can validate a user at the request
of a gateway or server in the network when a user requests access to network resources.
•
During the establishment of a VPN connection, the VPN gateway can interrupt the
process with an XAUTH request. At that point, the remote user must provide
authentication information such as a user name and password or some encrypted
response using the user name and password information.
process with an XAUTH request. At that point, the remote user must provide
authentication information such as a user name and password or some encrypted
response using the user name and password information.
•
The gateway then attempts to verify this information first against a local user database (if
RADIUS-PAP is enabled) and then by relaying the information to a central authentication
server such as a RADIUS server.
RADIUS-PAP is enabled) and then by relaying the information to a central authentication
server such as a RADIUS server.
You can select the RADIUS authentication protocol (PAP or CHAP) on the Edit IKE Policy
screen or Add IKE Policy screen. For more information, see
screen or Add IKE Policy screen. For more information, see
Even though you can configure RADIUS servers with IPv4 addresses only, the servers can
be used for authentication, authorization, and accounting of both IPv4 and IPv6 users.
be used for authentication, authorization, and accounting of both IPv4 and IPv6 users.
To configure primary and backup RADIUS servers:
1.
Log in to the unit:
a. In the address field of any of the qualified web browsers, enter https://192.168.1.1.
a. In the address field of any of the qualified web browsers, enter https://192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
b. In the Username field, enter admin and in the Password / Passcode field, enter
password.
Username
The user name for XAUTH.
Password
The password for XAUTH.
Table 54. Extended authentication settings for IPv4 and IPv6 (continued)
Setting
Description