Procedure:
- Log in to the SMS from a client.
- On the SMS toolbar, navigate to Admin > Authentication and Authorization.
- Select the Authentication option.
- In the Authentication Configuration area, select the RADIUS tab.
- To configure the primary RADIUS server click Edit in the Primary RADIUS Server area. To configure a backup RADIUS server click Edit in the Backup RADIUS Server area.
- The Edit RADIUS Server dialog box opens, enter the required information:
Setting | Description |
IP Address | The IP address of the RADIUS server. |
Port | Port on the RADIUS server that listens for authentication requests; the default value is 1812. |
Authentication Protocol |
Authentication method used on the RADIUS server:
To use the PEAP/EAP-MSCHAPv2 protocol, you must first import an X509 certificate for the RADIUS server. You can click Import to import a certificate or choose a previously imported one from the SMS certificate repository. IMPORTANT: certificate import or reset is a separate operation from configuring the authentication source and takes effect immediately. The SMS administration should carefully coordinate the certificate and the changes to the RADIUS configuration.
|
Secret/Confirm Secret | The string used to encrypt and sign packets between RADIUS clients and the RADIUS server is set in the RADIUS client configuration file. |
Timeout | Timeout, in seconds, for communication with the RADIUS server; the default value is 3 seconds. |
- You can test the RADIUS configuration by entering a valid server username and Password (and confirming) and then clicking Test.
- Click OK to save the server configuration.
Reference: SMS User Guide