HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

1. Follow the steps listed in “Creating or Modifying a Proxy” (page 118).
2. In the Realms to Forward field, select the Add Realms option.
3. Complete the Proxy Realm screen that appears by entering the name of the realm.
4. Select Yes if accounting requests are not to be forwarded to the proxy server.
5. On the Proxy Realm screen, click Save.
6. Repeat steps 2 to 4 for each realm that must be forwarded to the remote server. To
remove a realm that has been added, select the realm name from the Realms to
forward drop-down list and click Delete.
7. Complete the remaining fields if necessary.
8. Click Create.
9. From the navigation tree, click Save Configuration.
10. On the Save Configuration screen that appears, click Save.
CAUTION: Clicking Save saves the entire server configuration (access devices,
proxies, local realms, users, and server properties) to the servers you specify.
NOTE: By default, accounting requests originating from the realm are also
forwarded to the remote server.
Changing RADIUS Port Numbers
If a remote server is listening for authentication or accounting requests on ports that
are not the RADIUS defaults, you must configure the local server to forward messages
to the correct port. The current RADIUS default ports are 1812 and 1813. For Dynamic
Authorization, the default port is 3799. Many older RADIUS servers listen for requests
on ports 1645 and 1646.
Forwarding Requests to Alternate RADIUS Ports
Complete the following steps to forward requests to alternate RADIUS ports:
1. If you have not already configured the remote server, complete the steps listed in
“Creating or Modifying a Proxy” (page 118). If the proxy configuration already
exists, access it from the proxy screen.
2. In the Authentication relay port and Accounting relay port fields of the Proxy
attributes screen, specify the alternate ports.
3. Click Create.
Changing RADIUS Port Numbers 123