How to configure RADIUS authentication for user management? [EN]

We will take Windows2008 R2 as the RADIUS server for this case.

RADIUS-server-authentication RADIUS-server-authentication RADIUS-server-authentication RADIUS-server-authentication

RADIUS-server-authentication

Settings on RADIUS server:

1. Click Start and open Server Manager.

Server-Manager Server-Manager Server-Manager Server-Manager

Server-Manager

2. Create a user account and password (e.g., vivi in this case) by clicking Local Users and Groups>>Users.)

Create-a-user-account Create-a-user-account Create-a-user-account Create-a-user-account

Create-a-user-account

3. Locate RADIUS Client and right click the mouse button to select New.

Locate-RADIUS-Client Locate-RADIUS-Client Locate-RADIUS-Client Locate-RADIUS-Client

Locate-RADIUS-Client

4. Type the related information (for Friendly name, Address (IP or DNS), shared secret and so on) for the client. Keep the value of the shared secret in mind. At last, click OK to save the settings.

New-RADIUS-Client New-RADIUS-Client New-RADIUS-Client New-RADIUS-Client

New-RADIUS-Client

5. Open NPS>>Policy>>Network Policy. Right click the mouse button on the Network Policy to select New.

New-Network-Policy New-Network-Policy New-Network-Policy New-Network-Policy

New-Network-Policy

6. A pop-up window will appear as follows. Please type the name of the policy (e.g., User-Based in this case) and click Next.

Name-of-the-Policy Name-of-the-Policy Name-of-the-Policy Name-of-the-Policy

Name-of-the-Policy

7. In the following page, simply click Add.

Click-Add Click-Add Click-Add Click-Add

Click-Add

8. Choose Authentication Type and click Add for next step.

Authentication-Type Authentication-Type Authentication-Type Authentication-Type

Authentication-Type

9. In the following dialog, check the box of PAP. Then, click OK. User Management of Vigor router can only supports PAP authentication. Therefore, configure the RADIUS server to accept PAP authentication.

PAP-authentication PAP-authentication PAP-authentication PAP-authentication

PAP-authentication

10. In the following dialog, click Next.

Click-Next Click-Next Click-Next Click-Next

Click-Next

11. Choose Access granted and click Next.

Access-granted Access-granted Access-granted Access-granted

Access-granted

12. Check the box of Unencrypted authentication (PAP, SPAP) and click Next.

Unencrypted-authentication Unencrypted-authentication Unencrypted-authentication Unencrypted-authentication

Unencrypted-authentication

13. When the following dialog appears, simply click No.

Click-No Click-No Click-No Click-No

Click-No

14. In the following window, just click Next.

Click-Next Click-Next Click-Next Click-Next

Click-Next

15. Then, click Next.

Click-Next Click-Next Click-Next Click-Next

Click-Next

16. Now, the network policy (named with User-Based) has been created. Click Finish.

Click-Finish Click-Finish Click-Finish Click-Finish

Click-Finish

Settings on Vigor3200:

1. Access into the web configurator of Vigor3200.
2. Open Application>>RADIUS. Configure RADIUS server IP and Shared Secret. The value for Shared Secret should be the same as the settings configured in Step 4 described above for Settings on RADIUS server.

Application >> RADIUS Application >> RADIUS Application >> RADIUS Application >> RADIUS

Application >> RADIUS

3. Click OK to save the settings.
4. Open User Management>>User Profile (Reserved) and click Index #3 to create a user profile.

User Management >> User Profile User Management >> User Profile User Management >> User Profile User Management >> User Profile

User Management >> User Profile

5. Check the box of Enable this account and type a user name for such profile. Choose Radius as External Server Authentication and click OK to save the settings.

User Management >> User Profile User Management >> User Profile User Management >> User Profile User Management >> User Profile

User Management >> User Profile

6. Open User Management>>General Setup and specify User-Based as the Mode setting. Click OK.

User Management >> General-Setup User Management >> General-Setup User Management >> General-Setup User Management >> General-Setup

User Management >> General-Setup

7. Any user who wants to access into the Internet shall be authenticated by the RADIUS authentication mechanism. Vigor router will redirect the HTTP connection to the login page as the picture shown below.

Login-page Login-page Login-page Login-page

Login-page

8. If the access is granted, the following screen will appear.

access-granted access-granted access-granted access-granted

access-granted