Configuring RADIUS Authentication

A typical RADIUS configuration uses two Screens, each of which protects the site. With multiple sites, a given site may use the RADIUS server of another site as a backup.

To Configure RADIUS Authentication

1. Identify the RADIUS servers:

   # ssadm edit Policy edit> vars add prg=auth name=RADIUSServers VALUES={ host=radius_server_name } DESCRIPTION="RADIUS server name(s) or addresses to query"

2. Add the node secret used by the RADIUS protocol to secure traffic between the RADIUS client and server:

   # ssadm edit Policy edit> vars add sys=screen_name prg=auth name=RADIUSNodeSecret VALUE="xxxxxxxx

   Where xxxxxxxx is the RADIUS Node Secret.

3. Add a rule to allow the SunScreen machine to communicate with the RADIUS servers:

   # ssadm edit Policy edit> add rule radius EFS_hostname radius_server_name ALLOW edit> save # ssadm activate Policy