Policy Server Guides › Policy Server Configuration Guide › Authentication Schemes › RADIUS CHAP/PAP Authentication Schemes › Configure a RADIUS CHAP/PAP Authentication Scheme

Configure a RADIUS CHAP/PAP Authentication Scheme

You use a RADIUS CHAP/PAP authentication scheme when you are using the RADIUS protocol.

Note: The following procedure assumes that you are creating an object. You can also copy the properties of an existing object to create an object. For more information, see Duplicate Policy Server Objects.

To configure the authentication scheme

1. Click Infrastructure, Authentication.
2. Click Authentication Scheme, Create Authentication Scheme.

   The Create Authentication Scheme pane opens.

3. Click OK.

   Authentication scheme settings open.

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

4. Select RADIUS CHAP/PAP Template from the Authentication Type Style list.

   Scheme-specific settings open.

5. Enter a name and protection level in the General group box.
6. Specify the clear text password in the Scheme Setup group box.
7. Click Submit.

   The authentication scheme is saved and may be assigned to a realm.

RADIUS Server Authentication Schemes

SiteMinder supports the RADIUS protocol by using the Policy Server as the RADIUS server and an NAS client as the RADIUS client. RADIUS Agents allow the Policy Server to communicate with the NAS client devices. In the RADIUS Server authentication scheme the Policy Server acts as a RADIUS server attached to the SiteMinder protected network.

This scheme accepts user name and password as credentials. Multiple instances of this scheme can be defined. This scheme does not interpret RADIUS attributes that may be returned by the RADIUS server in the authentication response.

For more information on RADIUS Server authentication with SiteMinder, see the material on using the Policy Server as a RADIUS server in the Policy Server Administration guide.

RADIUS Server Scheme Prerequisites

Be sure that the following prerequisites are met before configuring a RADIUS Server authentication scheme:

• The RADIUS server is on a network accessible by the Policy Server.
• The Policy Server is not operating in FIPS–only mode. If the Policy Server is operating in FIPS–only mode, a RADIUS Server authentication scheme is not supported.