User Guide

OmniAccess SafeGuard OS Administration Guide
252
Chapter 6: Configuring Authentication and Role Derivation
1 admin yes
(SafeGuardOS) (config) #
Setting Up Authentication Servers
This chapter explains the different types of user authentication available in SafeGuard
OS. It also explains how to configure the SafeGuard device using the CLI to achieve the
maximum benefit in your deployment. It contains the following sections:
■ Configuring RADIUS Servers
■ Maintaining Users
■ Displaying User Sessions
■ Configuring Remote Authentication
Configuring RADIUS Servers
RADIUS servers are identified to SafeGuard OS by unique integers. To configure a
RADIUS server, use the following command in Global Configuration mode:
aaa radius-server Global Configuration command.
aaa radius-server id [ip-address ipaddr] [key secret][port authport]
[
retransmit retries] [timeout seconds]
Field Description
ID A system-generated indicator.
User The userid of the user not being logged.
Is Partial A partial string identifier used when you want to match
part of a string
Syntax Description id Unique numeric identifier for the RADIUS server.
Valid range is 0 (primary) and 1 (secondary).
ipaddr The IP address of the RADIUS server.
secret Shared secret as configured on the RADIUS
server for this client.
authport The authentication port.
retries Number of times to retry a request to the
backend server. The default is 3.