Previous Topic: Guidelines for Protecting RADIUS Devices

Next Topic: Set Up the User Directory

How to Authenticate Users in a Homogeneous RADIUS Environment

A homogeneous RADIUS environment is the most simple to protect. You can protect the RADIUS device using just one policy. This type of environment includes only one RADIUS device, such as a Cisco RAS, and one user directory, as shown in the following graphic:

To setup SiteMinder in a homogeneous RADIUS environment

  1. Configure the system:
    1. Define the RADIUS Agent, as explained in Configure a RADIUS Agent.
    2. Setup a user directory against which to authenticate RADIUS users, as explained in Set Up the User Directory
    3. Optionally, you can also define administrative users and modify the authentication schemes.
  2. Configure the policy domain:
    1. Create a RADIUS authentication scheme (CHAP or PAP), as explained in Create the Authentication Scheme.
    2. Define a realm that identifies the RADIUS Agent and the RADIUS authentication scheme, as explained in Configure a Realm Protected by a RADIUS Agent.
    3. Define a rule that enables authenticated users to access the realm protected by the RADIUS Agent, as explained in Configure a Rule for Authentication.
    4. Define a response that provides the user profile to the NAS device and configures the characteristics of the session using response attributes, as explained in Configure a Response and RADIUS Agent Response Attributes.
    5. Create a policy that binds the rule and response with the user directory, as explained in Configure a Policy.

More Information:

How RADIUS Authentication Works with the Policy Server


Copyright © 2010 CA. All rights reserved. Email CA about this topic