Netgear SRX5308 SRX5308 Reference Manual - Page 183

Click, to save your settings., You select the RADIUS authentication protocol PAP or CHAP on the Edit - na

Page 183 highlights

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual Table 5-14. RADIUS Client Settings (continued) Item Description (or Subfield and Description) Primary Server NAS Identifier The primary Network Access Server (NAS) identifier that must be present in a RADIUS request. Note: The VPN firewall functions as as NAS, allowing network access to external users after verification of their authentication information. In a RADIUS transaction, the NAS must provide some NAS identifier information to the RADIUS server. Depending on the configuration of the RADIUS server, the VPN firewall's IP address might be sufficient as an identifier, or the server might require a name, which you must enter in this field. Backup RADIUS Server Select the Yes radio button to enable and configure the backup RADIUS server, and then enter the settings for the three fields to the right. The default setting is that the No radio button is selected. Backup Server IP Address The IP address of the backup RADIUS server. Secret Phrase A shared secret phrase to authenticate the transactions between the client and the backup RADIUS server. The same secret phrase must be configured on both the client and the server. Backup Server NAS Identifier The backup NAS identifier that must be present in a RADIUS request. Note: See the Note earlier in this table for the Primary Server NAS Identifier. Connection Configuration Time out period Maximum Retry Counts The period in seconds that the VPN firewall waits for a response from a RADIUS server. The maximum number of times that the VPN firewall attempts to connect to a RADIUS server. 4. Click Apply to save your settings. Note: You select the RADIUS authentication protocol (PAP or CHAP) on the Edit IKE Policy screen or Add IKE Policy screen (see "Configuring XAUTH for VPN Clients" on page 5-38). Virtual Private Networking Using IPsec Connections v1.0, April 2010 5-41

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Virtual Private Networking Using IPsec Connections
5-41
v1.0, April 2010
4.
Click
Apply
to save your settings.
Primary Server NAS
Identifier
The primary Network Access Server (NAS) identifier that must be present
in a RADIUS request.
Note
: The VPN firewall functions as as NAS, allowing network access to
external users after verification of their authentication information. In a
RADIUS transaction, the NAS must provide some NAS identifier
information to the RADIUS server. Depending on the configuration of the
RADIUS server, the VPN firewall’s IP address might be sufficient as an
identifier, or the server might require a name, which you must enter in this
field.
Backup RADIUS Server
Select the
Yes
radio button to enable and configure the backup RADIUS server, and then enter the
settings for the three fields to the right. The default setting is that the
No
radio button is selected.
Backup Server IP Address
The IP address of the backup RADIUS server.
Secret Phrase
A shared secret phrase to authenticate the transactions between the
client and the backup RADIUS server. The same secret phrase must be
configured on both the client and the server.
Backup Server NAS
Identifier
The backup NAS identifier that must be present in a RADIUS request.
Note
: See the Note earlier in this table for the Primary Server NAS
Identifier.
Connection Configuration
Time out period
The period in seconds that the VPN firewall waits for a response from a
RADIUS server.
Maximum Retry Counts
The maximum number of times that the VPN firewall attempts to connect
to a RADIUS server.
Note:
You select the RADIUS authentication protocol (PAP or CHAP) on the Edit
IKE Policy screen or Add IKE Policy screen (see
“Configuring XAUTH for
VPN Clients” on page 5-38
).
Table 5-14.
RADIUS Client
Settings (continued)
Item
Description (or Subfield and Description)