Netgear SRXN3205 SRXN3205 Reference Manual - Page 127

ProSafe Wireless-N VPN Firewall SRXN3205 Reference Manual Figure 6-13 3. To activate (enable) the Primary RADIUS server, click the Yes radio button. The primary server options become active. 4. Configure the following entries: • Primary RADIUS Server IP address. The IP address of the RADIUS server. • Secret Phrase. Transactions between the client and the RADIUS server are authenticated using a shared secret phrase, so the same Secret Phrase must be configured on both client and server. • Primary Server NAS Identifier (Network Access Server). This Identifier MUST be present in a RADIUS request. Ensure the NAS Identifier is configured identically on both client and server. The SRXN3205 is acting as a NAS (Network Access Server), allowing network access to external users after verifying their authentication information. In a RADIUS transaction, the NAS must provide some NAS Identifier information to the RADIUS Server. Depending on the configuration of the RADIUS Server, the SRXN3205's IP address may be sufficient as an identifier, or the server may require a name, which you would enter here. This name would also be configured on the RADIUS server, although in some cases it should be left blank on the RADIUS server. 5. Enable a Backup RADIUS Server (if required). 6. Set the Time Out Period, in seconds, that the firewall should wait for a response from the RADIUS server. 7. Set the Maximum Retry Count. This is the number of tries the firewall will make to the RADIUS server before giving up. Virtual Private Networking Using IPsec v1.0, October 2008 6-25